Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions blog/2026-05-10-kernel-root-exploits.md
Original file line number Diff line number Diff line change
Expand Up @@ -95,8 +95,8 @@ coalescing. It has gotten CVE-2026-46300.
This LPE is unrelated to the others; under certain circumstances, the kernel
fails to prevent the dumping of process memory under ptraces, which can be used
to read out sensitive data. As it can be used to read e.g. ssh keys, it has been called
[ssh-keysign-pwn](https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn). It has
gotten CVE-2026-46333.
[ssh-keysign-pwn](https://korben.info/en/ssh-keysign-pwn-linux-kernel-flaw-9-years.html).
It has been assigned CVE-2026-46333.

This vulerability allows local attackers to read sensitive data (Information
Disclosure - ID) which may be useful to escalate privileges.
Expand Down Expand Up @@ -143,7 +143,7 @@ install algif_aead /bin/false
The fixes for Dirty Frag are still in development as of May 8. The first fixes
have been merged upstream and released in 7.0.5, 6.18.28, 6.12.87, 6.6.138,
6.1.172, 5.15.206 and 5.10.255 but there is
[more to come for rxrpc](https://lwn.net/ml/all/2026050859-ahead-anchovy-05e2@gregkh/).
more to come for rxrpc. <!--https://lwn.net/ml/all/2026050859-ahead-anchovy-05e2@gregkh/-->
Update 2026-05-11: 7.0.6 and 6.18.29 contain this last patch, older kernels don't need it.
The responsible disclosure process for Dirty Frag unfortunately failed due to the
[patches being spotted](https://www.openwall.com/lists/oss-security/2026/05/07/12),
Expand Down
Loading