Back to article

Linux's Latest Vulnerability Allows Reading Root-Owned Files By Unprivileged Users (opens in new tab)

Covers 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.Covered by 3 sources including needhelp.icu, kite.kagi.comDiscussed on Hacker News and Hacker News

Covers 1 related story

0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Discussed on Hacker News and r/linux

Covered in 4 articles

SSH-Keysign-Pwn: Reading Root-Owned Files via a Ptrace Logic Bug

Discussed on Hacker News

kite.kagi.com·

Linux maintainers release kernels with CVE-2026-46333 fix

kite.kagi.com·

Linux maintainers patch ssh-keysign-pwn file-read flaw

In other languages

Borns IT- und Windows-Blog·

Linux-Schwachstelle ssh-keysign-pwn (CVE-2026-46333) ermöglicht Fremdzugriff auf Dateien