Copy Fail

[HutEleven]

Has anyone assessed whether 3CX Linux deployments are impacted by the recent “Copy Fail” vulnerability?

Advisory: https://cert.europa.eu/publications/security-advisories/2026-005/

For interim mitigation, CERT-EU suggests disabling the vulnerable module:

echo "install algif_aead /bin/false" | sudo tee /etc/modprobe.d/disable-algif.conf
sudo modprobe -r algif_aead 2>/dev/null || true

Has 3CX issued any official guidance yet?
Any known side effects of disabling algif_aead on 3CX systems?
Are people applying this mitigation in production or waiting for kernel updates?

Interested to hear what others are doing.

 

[HutEleven]

Apologies - just found an existing thread

Thread 'CopyFail Kernel Vulnerability (CVE-2026-31431)'

Apr 30, 2026

Opening this thread because I know it's coming.

https://copy.fail/ was released into the wild. I'm sure people will ask when it will be patched, so this thread is for 3CX to state when the upstream patches will be pushed into 3CX updates.

• SweetAction
• Replies: 27
• Forum: Security / Anti Virus Alerts

•