thanks to gemini for this meme 🙏🏼

here's the test APK :)

Give it a try..👀

Lemme cook 🗿

Can anyone try the recently discovered "Copy Fail" vulnerability on Droidspaces?

https://github.com/tgies/copy-fail-c/releases/tag/v0.2.0

Looks like I don't have a supported kernel.

What is expected is gaining root access inside the container or total container escape.

It seems like Google saved all ya all asses by turning off the core Android kernel configuration necessary for this vulnerability:

CONFIG_CRYPTO_USER_API_AEAD=y

But that doesn’t mean we are immune to this kind of attack since non-GKI kernels exist.

We still gotta block the necessary syscalls needed for this kind of attack using seccomp for the greater good.

Well, you are vulnerable on Linux Desktop

What happened was a Local Privilege Escalation, not a container escape.

Therefore, this is a kernel issue rather than an issue with Droidspaces.

However, we will work on a fix from our side if possible ❤️