Back to article

japan.zdnet.com

Linuxカーネルに「ssh-keysign-pwn」の脆弱性発覚--直近4度目 (opens in new tab)

Covers 5 stories including 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Covers 5 related stories

0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Discussed on Hacker News and r/linux

CVE-2026-46333 (SSH-keygen-pwn)

Discussed on Hacker News and r/linux

Blog on AlmaLinux·

ssh-keysign-pwn (CVE-2026-46333): Patched kernels available in testing

forum.manjaro.org·

[ALERT] ssh-keysign-pwn, unprivileged users are able to read root-owned files

The 4th Linux kernel flaw this month can lead to stolen SSH host keys

Discussed on Hacker News