3 ms·
Linux's Latest Vulnerability Allows Reading Root-Owned Files by Unpriv Users
- tryauuum 6mo agoChat is this real? Sorry I don't have an ssh client on my phone
- tryauuum 6mo agothis is real
- krunck 6mo agoRemediation: https://gitlab.cern.ch/ComputerSecurity/mitigations/ssh-keysign https://gitlab.cern.ch/ComputerSecurity/mitigations/ssh-keys...
- krunck 6mo agoThis suggests setting kernel.yama.ptrace_scope=3: * https://almalinux.org/blog/2026-05-15-ssh-keysign-pwn-cve-2026-46333/ https://almalinux.org/blog/2026-05-15-ssh-keysign-pwn-cve-20... Some coworkers say this will prevent exploitation in containers.