Linux maintainers release kernels with CVE-2026-46333 fix (opens in new tab)

Covers 5 stories including 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Linux stable maintainers released kernels that fix CVE-2026-46333 after disclosure of ssh-keysign-pwn, a local Linux kernel flaw that can let an unprivileged user read root-owned files. Qualys reported the issue, Linus Torvalds fixed it on May 14, and public exploit code appeared soon after disclosure. ZDNet reported that downstream availability was still uneven across Linux distributions as of May 15.Highlights:Affected kernels: Manjaro described affected systems as pre-31e62c2ebbfd kernels ...

Read the original article