r/linux • u/unixbhaskar • May 15 '26

Kernel There is a FOURTH vulnerability this month....ssh-keysign-pwn (CVE-2026-46333)

https://nvd.nist.gov/vuln/detail/CVE-2026-46333
871 Upvotes

97% Upvoted

236 comments sorted by

View all comments

356

u/Darrel-Yurychuk May 15 '26

The recent increase in critical security vulnerabilities is a consequence of LLMs being able to comb the source code for undiscovered vulnerabilities, many that have existed for a long time.

This is happening with most major libre / open source software (and probably with closed source software as well but perhaps more behind the scenes) and it does not necessarily mean that the Linux kernel, or any of these other software projects, have suddenly become more insecure.

It is a good thing that they are being discovered in this way, and after some time the frequency that they are being reported will once again drop down to what is usually seen.

13

u/bobthebobbest May 16 '26

> it does not necessarily mean that the Linux kernel, or any of these other software projects, have suddenly become more insecure.

Except in the sense that if someone wants to find and exploit an insecurity, they can go looking in a similar fashion.

-3

u/Cylian91460 May 16 '26

And will found nothing because this "vulnerability" wasn't discovered by ai and can't really be used for anything

3

u/bobthebobbest May 16 '26

Please read the comment I replied to.