A local information disclosure bug reported by Qualys was fixed in the linux kernel today: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a
Soon after, PoCs showed up on GitHub: https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn
Outcome is an unprivileged user can steal read fds from a privileged process (confirmed by example of reading private ssh hostkey and /etc/shadow). No CVE yet.
Jan Schaumann
npub1kv…medh2
2026-05-15 02:47:11 UTC
Author Public Key
npub1kvy8enal7npw9ct28tc53d4r5fl7q7a3ua3gku22z8jlyec37f3snmedh2Seen on
wss://relay.ditto.pubPublished at
2026-05-15 02:47:11 UTCEvent JSON
{
"id": "d1b0ad54e68de4895b42d763e2464d510f0d940f488b0d75fb2bbeee1375f490",
"pubkey": "b3087ccfbff4c2e2e16a3af148b6a3a27fe07bb1e7628b714a11e5f26711f263",
"created_at": 1778813231,
"kind": 1,
"tags": [
[
"proxy",
"https://mstdn.social/users/jschauma/statuses/116576303960679435",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "A local information disclosure bug reported by Qualys was fixed in the linux kernel today: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a\n\nSoon after, PoCs showed up on GitHub: https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn\n\nOutcome is an unprivileged user can steal read fds from a privileged process (confirmed by example of reading private ssh hostkey and /etc/shadow). No CVE yet.",
"sig": "8e66e3f34d3c1cafea6715f6f2ac3213039299ea3326332edc650939af4fd01b292a1307f69734ba841b47edd9f2ef49b7aa06bb957dd2983825c40502a3a61f"
}