๐ปZDNet AIโขStalecollected in 39m
New Linux kernel flaw risks exposing SSH host keys
๐กCritical kernel flaw risks your infrastructure's SSH security. Check if your AI cluster's OS has the latest patch.
โก 30-Second TL;DR
What Changed
A new Linux kernel vulnerability allows for potential SSH host key theft.
Why It Matters
This vulnerability poses a significant risk to infrastructure security, particularly for AI clusters and cloud environments relying on SSH for node communication. Compromised keys could allow unauthorized access to sensitive development environments.
What To Do Next
Check your Linux distribution's security advisory page and run 'sudo apt update && sudo apt upgrade' or your distro's equivalent to apply the latest kernel patches immediately.
Who should care:Developers & AI Engineers
Key Points
- โขA new Linux kernel vulnerability allows for potential SSH host key theft.
- โขA patch has been released, but distribution availability is inconsistent.
- โขUsers are advised to monitor their specific Linux distribution for updates.
๐ง Deep Insight
Web-grounded analysis with 7 cited sources.
๐ Enhanced Key Takeaways
- โขThe vulnerability, dubbed "ssh-keysign-pwn" and assigned CVE-2026-46333, is a 6-year-old race condition residing in the Linux kernel's
__ptrace_may_access()function. - โขExploitation allows an unprivileged local user to steal file descriptors from privileged processes like
ssh-keysignandchageduring their exit, enabling read access to sensitive files such as SSH host private keys and/etc/shadow. - โขA public proof-of-concept (PoC) exploit is available, demonstrating reliable exploitation across various affected distributions including Arch Linux, Debian, Ubuntu, CentOS, and AlmaLinux 9 and 10.
- โขThe underlying file descriptor theft behavior was initially identified and a patch proposed by Google security researcher Jann Horn in October 2020, but it was not fully integrated until the recent disclosure.
- โขTemporary mitigations include tightening Linux's Yama ptrace restrictions by setting
sysctl kernel.yama.ptrace_scope=2or disabling host-based SSH authentication and thessh-keysignutility where not essential.
๐ ๏ธ Technical Deep Dive
- The flaw is a race condition in the
__ptrace_may_access()function, which is the kernel's gatekeeper for deciding if one process can inspect another. - Specifically, during the
do_exit()code path, the kernel runsexit_mm()(detaching the task's memory descriptor) beforeexit_files()(closing file descriptors). - In this brief window,
task->mmbecomesNULL, causing__ptrace_may_access()to skip its "dumpable" check. - An unprivileged process with the same User ID (UID) can then use the
pidfd_getfd(2)system call (introduced in kernel 5.6) to copy open file descriptors from the exiting privileged process. - Targeted SUID binaries include
ssh-keysign(which opens SSH host private keys) andchage(which opens/etc/shadow) before dropping privileges. - The exploit reliably triggers within 100โ2,000 process spawns.
๐ฎ Future ImplicationsAI analysis grounded in cited sources
Increased focus on race conditions and exit path vulnerabilities in kernel development.
The long-standing nature of this bug (6 years) and its re-discovery after an earlier patch proposal highlight a need for more rigorous review of complex kernel logic, especially in process exit paths and inter-process communication.
Accelerated adoption of live patching solutions for Linux kernels.
This vulnerability, along with several other critical flaws discovered recently, necessitates frequent reboots for patching, which live patching solutions like KernelCare can circumvent, reducing downtime for critical systems.
Enhanced scrutiny of
pidfd_getfd(2) and similar file descriptor manipulation syscalls.The
pidfd_getfd(2) syscall, introduced in kernel 5.6, was a key component in exploiting this race condition, suggesting that new syscalls that interact with process state and file descriptors will undergo more intense security review.โณ Timeline
2002
The `ssh-keysign` file descriptor-leaving pattern, central to the vulnerability, was introduced.
2017-02
Linux kernel 4.10, containing the 'Copy Fail' vulnerability (CVE-2026-31431), was released, contributing to a broader context of long-standing kernel flaws.
2020-10
Google security researcher Jann Horn identified the underlying FD-theft behavior and proposed a patch, which was not fully integrated at the time.
2026-05-14
Qualys publicly disclosed the `ssh-keysign-pwn` vulnerability (CVE-2026-46333), and Linus Torvalds released a fix (commit 31e62c2ebbfd) on the same day.
2026-05-14
Public proof-of-concept exploits, `sshkeysign_pwn` and `chage_pwn`, were published by '_SiCk' shortly after the patch release.
2026-05-15
Major Linux distributions began rolling out patched kernel versions, including 7.0.8, 6.18.31, 6.12.89, 6.6.139, 6.1.173, 5.15.207, and 5.10.256.
๐ Sources (7)
Factual claims are grounded in the sources below. Forward-looking analysis is AI-generated interpretation.
๐ฐ
Weekly AI Recap
Read this week's curated digest of top AI events โ
๐Related Updates
OpenAI Bans Cambodia-Based Fraud Network Using ChatGPT
ITไนๅฎถโขAug 1
๐ฐ
Anthropic and OpenAI disclose AI systems breaching external networks
New York Times TechnologyโขJul 31
๐
Anthropic AI Models Accidentally Hacked Three Organizations During Testing
Bloomberg TechnologyโขJul 30
How to keep your AI conversations as private as possible
ZDNet AIโขJul 31
AI-curated news aggregator. All content rights belong to original publishers.
Original source: ZDNet AI โ