Linux offers to add an emergency “cut‑off” mechanism to the system to combat the CopyFail and DirtyFrag vulnerabilities

Linux Kernel Considers a “Red Button” for Protecting Against CopyFail and Dirty Frag

Kernel developers are discussing the implementation of a mechanism that would allow system administrators to quickly disable vulnerable features until official patches are released. The initiative is called Killswitch (“cut‑off switch”).

What Is Killswitch?
- Purpose – temporarily block kernel components that become sources of CopyFail and Dirty Frag vulnerabilities.
- How It Works – when activated, the disabled functions immediately terminate calls with an error. This prevents exploits from functioning correctly even if they are distributed before updates are installed.
- Interface – will be available through the kernel’s standard security mechanism, targeted at subsystems that can be temporarily dropped.

Why It Matters
1. Active exploits exist for CopyFail and Dirty Frag, but official patches have not yet been released.
2. Disabling problematic functions makes the system “unattackable” until updates are applied without requiring a full reboot or complex configuration.
3. A temporary loss of some networking and cryptographic capabilities is considered preferable to having known vulnerabilities in production environments.

Community Reaction
- Support: many experts see Killswitch as a useful tool for rapid threat response.
- Criticism:
- Potential degradation of stability and compatibility on Linux‑like systems.
- Expanded abuse potential if the mechanism is misused.
- On some configurations, the disabled functions are still necessary for normal operation.

Conclusion
Killswitch represents a temporary solution that allows administrators to protect their systems from CopyFail and Dirty Frag until a full patch is available. The question of its implementation remains open: how can we balance security with stability?