Back to article

SSH-Keysign-Pwn: Reading Root-Owned Files via a Ptrace Logic Bug (opens in new tab)

Covers 4 stories including 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.Discussed on Hacker News

Covers 4 related stories

0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Discussed on Hacker News and r/linux

Copy Fail

Discussed on Hacker News, Lobsters, r/LocalLLaMA, r/linux, r/linuxadmin, r/programming, and r/selfhosted

oss-security - Logic bug in the Linux kernel's __ptrace_may_access() function

Discussed on Hacker News and Hacker News

Linux's Latest Vulnerability Allows Reading Root-Owned Files By Unprivileged Users

Discussed on Hacker News and Hacker News