Еще не успели выдохнуть, как подъехала 4 уязвимость
Arbitrary File Read Linux
https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/tree/main
Патча пока нет 🌚
* Block pidfd_getfd. I don't think it's actually used that heavily and
there's often fallbacks for older kernels when it is.
* You could remove the world-executable bit from ssh-keysign
but this is *not* the only binary affected, and this is a very weak
mitigation indeed __only for the PoC__.
👀@ever_secure | 💪 Мерч | 💳Поддержать