A new Linux kernel vulnerability known as SSH-keysign-pwn (tracked as CVE-2026-46333) was publicly disclosed on on 14 May 2026.
This vulnerability allows an unprivileged local user to read any files owned by root. A working exploit is already publicly available.
...