Linux maintainers patch ssh-keysign-pwn file-read flaw (opens in new tab)

Linux kernel maintainers patched a local vulnerability tracked by CloudLinux as CVE-2026-46333 and known as ssh-keysign-pwn, after Qualys reported that unprivileged users could read root-owned files on affected systems. CloudLinux said the issue is in the kernel's ptrace access-check path and that a public proof of concept can read secrets such as SSH host private keys and the shadow password database without directly obtaining root privileges. A Manjaro forum post said Linus Torvalds patched...