16 May 2026 - 18:11
Category: IT Fail
Your SSH Keys Are Now Public Property
A fresh Linux kernel flaw allows any local user to help themselves to your private SSH keys and password hashes. I suppose asking for basic kernel-level security is too much work.
Source: Cybersecurity News
The Full Story
The "ssh-keysign-pwn" flaw, or CVE-2026-46333 for those who still enjoy tracking these disasters, allows local nuisances to pick the locks of the Linux kernel. By plucking SSH private keys and password hashes straight from /etc/shadow, it turns your secure server into an open buffet for the unprivileged. Most Linux distributions released before mid-May 2026 are currently participating in this unintended transparency initiative. One should probably update to a kernel released after May 14, 2026, though we all know we will be back here next month for the sequel.