We're seeing a wave of Linux security issues lately as it has become a bigger focus, and now we have Fragnesia and ssh-keysign-pwn revealed. After the issues of Dirty Frag and Copy Fail recently, you should ensure you're keeping your system up to date and regularly checking for security updates.
Fragnesia is another Linux local privilege escalation exploit, which is actually a member of the Dirty Frag vulnerability class. The the oss-security list notes "It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition".
And the most recently revealed issue with ssh-keysign-pwn notes it allows people to read root-owned files as an unprivileged user. Ouch.
Keep an eye on our Security article tag for more disclosures.
Article taken from GamingOnLinux.com.
See more from me
You can also find comments for this article on social media: 
Avehicle7887 2 hours ago
It's good that they are being discovered and reported.
We're seeing a wave of Linux security issues lately as it has become a bigger focusI didn't check for the latest cases, but I would be surprised if the wave is not due to AI checking out software and sometimes [finding decades old security flaws](https://medium.com/predict/an-ai-found-a-27-year-old-bug-hiding-in-openbsd-it-cost-less-than-50-to-find-it-489064e9178c) that no human found in all that time.
And yes, that's is a risk and it is making our software more secure at the same time.
PlayingOnLinuxphone 1 hour ago
Quoting: EikeI didn't check for the latest cases, but I would be surprised if the wave is not due to AI checking out softwareSingle findings for sure. But the wave? It is probably due one security researcher found a vulnerability with LLM, other security researcher just need to look for similar patterns. Even in pre-LLM-times researcher where doing this to ensure no criminals finding similar vulnerabilities. So I would be surprised if LLM would play an important(!) role in finding the second and third bug.
Patreon
PayPal
How to setup OpenMW for modern Morrowind on Linux / SteamOS and Steam Deck
How to install Hollow Knight: Silksong mods on Linux, SteamOS and Steam Deck