Following yesterday's disclosure of the ssh-keysign-pwn vulnerability that allows unprivileged users to read root-owned files, a slew of new stable kernel releases are out today to address this latest Linux security issue. Today's release round-up is led by the Linux 7.0.8 stable release that incorporates the patch from Linus Torvalds for ptrace as a "slightly saner" get_dumpable() logic. This patch is what gets the ssh-keysign-pwn vulnerability. In addition to Linux 7.0.8, Linux 6.18.31 is out today for that latest Long Term Support version and with the only change being this security patch. Similarly, Linux 6.12.89, Linux 6.6.139, Linux 6.1.173, Linux 5.15.207, and Linux 5.10.256 are all out today as well for patching those older LTS kernels.
Linux 7.0.8 Released & LTS Kernels Updated For ssh-keysign-pwn
Full Article
Original Source
Read the full article at Phoronix →KhanList aggregates and links to publicly available news content. We do not host full articles from third-party sources. Always verify important information with original sources.