CVE-2026-46333 (ssh-keysign-pwn): The Fourth Linux Kernel Vulnerability in Three Weeks and What to Do About It
CVE-2026-46333, publicly known as ssh-keysign-pwn, is a Linux kernel information disclosure vulnerability disclosed by Qualys on May 14, 2026. It lets unprivileged users read root-owned files including SSH host private keys and /etc/shadow. This guide explains what it is, why the previous mitigations do not cover it, w
Read guide