How EasyEngine Dashboard handled Copy Fail before you noticed

If your EasyEngine sites kept serving traffic normally over the past weekend, you experienced Copy Fail the way we wanted you to. 

Ubuntu’s Security Team published the kmod-package mitigation on April 30, 2026. By the time most folks had finished reading the advisory, the mitigation was already running on every EasyEngine Dashboard-managed server.

What is Copy Fail?

CVE-2026-31431, disclosed on April 29 by Xint and Theori, is a local privilege escalation in the Linux kernel rated CVSS 7.8. It affects every major Linux distribution shipped since 2017: Ubuntu before 26.04, Debian, RHEL, Amazon Linux, SUSE. 

Anyone with unprivileged code execution on a vulnerable host (a compromised PHP process, a CI runner, a foothold from any other bug) can become root with a single 732-byte script. In plain terms, the bug lets almost any program or user already on a Linux server take over the whole machine. 

CISA added it to the Known Exploited Vulnerabilities (KEV) catalog on May 1, the regulatory equivalent of “patch this now.”

The fix already running on your servers

Ubuntu’s interim fix is small: blacklist a single kernel module (algif_aead), then upgrade the kmod package so the blacklist persists across reboots. We applied both across every healthy EasyEngine Dashboard-managed server within hours of the USN-8226-1 advisory landing. 

TLS, SSH, dm-crypt, LUKS, IPsec, and every other crypto path your stack uses were untouched. The mitigation only closes the AF_ALG path that the public Copy Fail exploits depend on, and that path is not used by any part of EasyEngine.

How EasyEngine Dashboard protected you

The reason the mitigation reached your servers in hours, and not days, is that EasyEngine Dashboard does the routine parts of server hygiene continuously, before any specific CVE exists.

Every EasyEngine Dashboard-managed server runs a security scan that flags missing patches, exposed configurations, and drift from a healthy baseline. Every server with Weekly System Updates enabled (the default for newly provisioned servers) gets an apt dist-upgrade swept across it through an Ansible pipeline that has been running against the fleet for years. Whether Ubuntu publishes a regular update, or something more urgent like comes up mid-week, the pipeline to get this to production is already in place. We just sent one more thing through it.

We did not have to compile an inventory of which servers were ours, write a one-off script under deadline, or test a never-before-run playbook against the fleet.

EasyEngine Dashboard is the best of both worlds

Self-hosted WordPress on a VPS you own gives you control, and without any platform lock-in or fees. Managed hosting abstracts the hosting layer, but gives you peace of mind: auto updates, someone watching for CVEs, applying patches, keeping the lights on.

EasyEngine Dashboard sits in the middle. Your servers stay yours, but you get a protective layer: the security scan, the weekly sweep, the rapid mitigation push when something like Copy Fail lands. With EasyEngine Dashboard, you do not have to trade ownership for creature comforts. 

Confirm the fix

If your servers have Weekly System Updates enabled (the default, visible on each server’s Configurations tab in EasyEngine Dashboard), nothing. The mitigation is in place. To confirm, SSH in and run:

lsmod | grep algif_aead

The module should not be listed.

If you have Weekly System Updates disabled on one or more servers, you will have to run

apt update && apt install --only-upgrade kmod

or trigger a full apt dist-upgrade.

Thanks

To Xint and Theori for disclosing Copy Fail responsibly, and to the Ubuntu Security Team for shipping a workable mitigation on a tight deadline. The week was quiet on our side because it was loud on theirs.

EasyEngine Dashboard gives you the server you own and the protection you’d expect from a managed host. If you’re curious whether it fits your setup, our team is glad to walk you through it.

Links: Ubuntu Security Advisory | Xint technical write-up | EasyEngine Dashboard Features