Linux's Latest Vulnerability Allows Reading Root-Owned Files By Unprivileged Users (opens in new tab)

Covers 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.Covered by 3 sources including needhelp.icu, kite.kagi.comDiscussed on Hacker News and Hacker News

Following Dirty Frag, Fragnesia, and other Linux kernel vulnerabilities making themselves known in recent days, the latest now is ssh-keysign-pwn...

Read the original article

Sign in to keep reading the full article.

Covered in 4 articles

SSH-Keysign-Pwn: Reading Root-Owned Files via a Ptrace Logic Bug

Discussed on Hacker News

kite.kagi.com·

Linux maintainers release kernels with CVE-2026-46333 fix

kite.kagi.com·

Linux maintainers patch ssh-keysign-pwn file-read flaw