Linux's Latest Vulnerability Allows Reading Root-Owned Files By Unprivileged Users
Following Dirty Frag, Fragnesia, and other Linux kernel vulnerabilities making themselves known in recent days, the latest now is ssh-keysign-pwn.
With ssh-keysign-pwn, unprivileged users are able to read root-owned files. That affects all Linux kernel releases up through today's latest Linux Git state as of earlier today.
The ssh-keysign-pwn was reported by Qualys and fixed by the mainline Linux kernel earlier today. This patch to adjust the kernel's ptrace behavior is what fixes the issue.
More details on ssh-keysign-pwn can be found via this GitHub repository.
Update: Linux 7.0.8 Released & LTS Kernels Updated For ssh-keysign-pwn
With ssh-keysign-pwn, unprivileged users are able to read root-owned files. That affects all Linux kernel releases up through today's latest Linux Git state as of earlier today.
The ssh-keysign-pwn was reported by Qualys and fixed by the mainline Linux kernel earlier today. This patch to adjust the kernel's ptrace behavior is what fixes the issue.
More details on ssh-keysign-pwn can be found via this GitHub repository.
Update: Linux 7.0.8 Released & LTS Kernels Updated For ssh-keysign-pwn