Linux 7.2 removes strncpy function after six years

Linux 7.2 has completed the removal of the strncpy function from the kernel. The change ended a long-running cleanup effort involving more than 360 patches.

The merge window for Linux 7.2 closed on Friday with the final removal of strncpy from every subsystem. Kernel developers had worked on the project for six years.

The function is described in the kernel's own documentation as actively dangerous. Its elimination marks the end of a campaign that many had stopped expecting to finish.

The update affects all remaining uses of the C string-copy routine across drivers and other components.

Labaran da ke da alaƙa

Illustration depicting the Linux CopyFail vulnerability enabling root access exploits alongside Ubuntu's DDoS-induced outage.
Hoton da AI ya samar

Linux CopyFail exploit threatens root access amid Ubuntu outage

An Ruwaito ta hanyar AI Hoton da AI ya samar

A critical Linux vulnerability known as CopyFail, tracked as CVE-2026-31431, allows attackers to gain root access on systems running kernels since 2017. Publicly released exploit code has heightened risks for data centers and personal devices. Ubuntu's infrastructure has been offline for over a day due to a DDoS attack, hampering security communications.

NVIDIA engineer Sasha Levin has proposed a new mechanism for the Linux kernel that would let administrators quickly disable flawed functions on live systems. The patch, called killswitch, aims to mitigate privilege escalation risks without waiting for full fixes. It remains under review on the Linux Kernel Mailing List.

An Ruwaito ta hanyar AI

Four days after the CopyFail (CVE-2026-31431) exploit disclosure disrupted Ubuntu services, the US government warned of its critical risks to Linux systems, urging immediate patching amid public exploit code.

Wannan shafin yana amfani da cookies

Muna amfani da cookies don nazari don inganta shafin mu. Karanta manufar sirri mu don ƙarin bayani.
Ƙi