Linux kernel flaw opens root-only files to unprivileged users (opens in new tab)

Covers 3 stories including 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Plus ModuleJail, a radical proposal for minimizing the impact of similar bugs

Read the original article

Sign in to keep reading the full article.