Back to article

Blog on AlmaLinux

ssh-keysign-pwn (CVE-2026-46333): Patched kernels available in testing (opens in new tab)

Covers 4 stories including 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.Covered by 5 sources including Latest news, thehackernews.com

Covers 4 related stories

0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Discussed on Hacker News and r/linux

CVE-2026-46333 (SSH-keygen-pwn)

Discussed on Hacker News and r/linux

oss-security - Logic bug in the Linux kernel's __ptrace_may_access() function

Discussed on Hacker News and Hacker News

LWN.net featured content

·

Seven new stable kernels with patches for CVE-2026-46333

Covered in 5 articles

The 4th Linux kernel flaw this month can lead to stolen SSH host keys

Discussed on Hacker News

thehackernews.com·

DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

Security Affairs·

DirtyDecrypt: PoC Released for yet another Linux flaw

In other languages

japan.zdnet.com·

Linuxカーネルに「ssh-keysign-pwn」の脆弱性発覚--直近4度目

Borns IT- und Windows-Blog·

Linux-Schwachstelle ssh-keysign-pwn (CVE-2026-46333) ermöglicht Fremdzugriff auf Dateien