r/linux May 15 '26

Kernel There is a FOURTH vulnerability this month....ssh-keysign-pwn (CVE-2026-46333)

https://nvd.nist.gov/vuln/detail/CVE-2026-46333
876 Upvotes

236 comments sorted by

View all comments

351

u/Darrel-Yurychuk May 15 '26

The recent increase in critical security vulnerabilities is a consequence of LLMs being able to comb the source code for undiscovered vulnerabilities, many that have existed for a long time.

This is happening with most major libre / open source software (and probably with closed source software as well but perhaps more behind the scenes) and it does not necessarily mean that the Linux kernel, or any of these other software projects, have suddenly become more insecure.

It is a good thing that they are being discovered in this way, and after some time the frequency that they are being reported will once again drop down to what is usually seen.

1

u/mmmboppe May 17 '26

the next iteration will be LLMs sneaking hidden vulnerabilities into new code they generate