Opt-in Linux 7.0 Kernel for Proxmox VE 9 available on test and no-subscription

[Chris]

A new kernel with a patch for copy.fail will be available ? perhaps the version 7 of the kernel isn't impacted.

For detail see and watch the security announcements https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-850782

 

[bbgeek17]

7.0 isnt affected by it.

It would be incorrect to say that 7.0 "is not affected". It is affected but patches have been released. Including in the PVE distribution.

Cheers

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[fabian]

It would be incorrect to say that 7.0 "is not affected". It is affected but patches have been released. Including in the PVE distribution.

Cheers

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

7.0 already contained the relevant commit upstream prior to it being cut:

https://git.kernel.org/linus/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 (7.0-rc7)

 

[SteveITS]

A new kernel with a patch for copy.fail will be available ? perhaps the version 7 of the kernel isn't impacted.

Post in thread 'Proxmox Virtual Environment - Security Advisories'

Today at 14:59

Subject: PSA-2026-00018-1: "copy.fail" local privilege escalation via AF_ALG socket​

Advisory date: 2026-04-30

Packages: proxmox-kernel-6.8, proxmox-kernel-6.14, proxmox-kernel-6.17

Details:

An issue published under the name "copy.fail" was found in the Linux kernel's handling of AF_ALG socket messages. An unprivileged local user could abuse this issue to write 4 controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root and potentially escape sandboxing mechanisms such as containers.

Mitigations:

Fixed kernel...

• ProxmoxSecurityAdvisory

 

[gfngfn256]

I updated my Proxmox machine today and the default kernel was updated to Linux 7.0.0-3-pve. Everything appears to be working correctly, however my idle power usage has significantly increased. As this is a home lab environment running Nextcloud, HomeAssistant, etc. an idle power increase from ~15W to ~21W is an increase of 40%.

Are other people noticing this behaviour?

Have not really noticed that - if anything maybe 1-2 watts LOWER power draw on the newer kernel. Really to early to comment- I only upgraded yesterday. All this will really be HW depenedent.