Back Foro3D

Linux Seven Point Zero Point Eight and LTS Patches Fix ssh-keysign-pwn Flaw

Foro3D • May 17, 2026

The Linux kernel receives an urgent update with version 7.0.8, accompanied by patches for several LTS branches. The reason is to fix the ssh-keysign-pwn vulnerability, a flaw that allowed unprivileged users to read files owned by root. The main solution includes a patch from Linus Torvalds for the ptrace get_dumpable() logic.

The vulnerability exploited an error in the get_dumpable() function related to ptrace, allowing unauthorized access to sensitive data. Linus Torvalds proposed an approach that modifies the decision logic to prevent unprivileged processes from obtaining restricted information. The patch is described as a sensible adjustment , as it does not break existing functionalities and cleanly closes the security hole. The affected LTS branches already have their respective backports.

It turns out that having root privileges wasn't very useful if anyone could read its files as if they were class notes. The flaw turned the superuser into the neighbor who leaves the door open. Now, with Torvalds' patch, root files are once again as secure as a safe with a forgotten password. Good thing the patch arrived before someone read the kernel's shopping list.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Linux Kernel Vulnerability Exposes SSH Keys and Passwords A newly discovered Linux kernel vulnerability, tracked as CVE-2026-46333 and nicknamed 'ssh-keysign-pwn', allows unprivileged users to access sensitive files such as SSH host keys and the shadow password file. This flaw has existed for approximately six years and was disclosed by Qualys. The vulnerability arises from a logic error in the ptrace_may_access() function, which fails to enforce proper access controls during process termination. Public exploits for this vulnerability were released shortly after its disclosure, leading to urgent patching efforts across multiple Linux distributions. Affected systems include AlmaLinux 8, 9, and 10, with patches already available in testing repositories. Security experts recommend tightening ptrace_scope settings as a mitigation strategy. The flaw poses a significant risk for lateral movement and long-term persistence in compromised environments. 13 sources 72

Extracted Entities

Linux Seven Point Zero Point Eight and LTS Patches Fix ssh-keysign-pwn Flaw

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (1)

Vulnerabilities (1)