Copy Fail: 732 bytes that root every Linux box since 2017
A logic bug in the kernel’s AEAD crypto path lets an unprivileged user write four controlled bytes anywhere in the page cache. The same 732-byte Python script Theori dropped roots Ubuntu, RHEL, SUSE, Amazon Linux, basically every major distro shipped since 2017. Walking through how the chain actually works.