Fragnesia and ssh-keysign-pwn are the latest Linux security problems

We're seeing a wave of Linux security issues lately as it has become a bigger focus, and now we have Fragnesia and ssh-keysign-pwn revealed. After the issues of Dirty Frag and Copy Fail recently, you should ensure you're keeping your system up to date and regularly checking for security updates.

Fragnesia is another Linux local privilege escalation exploit, which is actually a member of the Dirty Frag vulnerability class. The the oss-security list notes "It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition".

And the most recently revealed issue with ssh-keysign-pwn notes it allows people to read root-owned files as an unprivileged user. Ouch.

Keep an eye on our Security article tag for more disclosures.