|
May 15 |
Posted by Lee Blakely on 15 May 2026 04:35 PM
|
|
Security Notice: CVE-2026-46333 in Linux Last updated: May 22, 2026 May 22, 2026 Additional technical details about CVE-2026-46333 have now been publicly disclosed, including reports describing local privilege escalation and potential disclosure of sensitive local files on affected Linux systems. Reliable Penguin has completed review and remediation across client servers under our management. All client servers have either had available vendor patches installed or the recommended mitigation applied where a patch was not yet available. We continue to monitor upstream vendor guidance and will apply any additional updates as they become available. No customer action is required at this time unless contacted directly by Reliable Penguin support. May 16, 2026 CloudLinux and KernelCare have both released updates to address CVE-2026-46333. Alma Linxu has a patch in the testing channel which we expect to enter general distribution over the weekend. May 15, 2026 Reliable Penguin is aware of CVE-2026-46333, a recently disclosed Linux kernel vulnerability involving `ptrace` access control logic. We are monitoring guidance from the Linux kernel maintainers, CloudLinux, AlmaLinux, Ubuntu, Red Hat, KernelCare, and other relevant upstream vendors. As patched kernels and live patches become available from the appropriate upstream sources, we will apply updates across affected systems and perform any required reboots. Consistent with Reliable Penguin’s update-and-notify model, critical and high-priority security updates may be applied as soon as practical rather than waiting for a scheduled maintenance window. Clients with Enterprise level support plans will be notified when possible after updates that require or result in a system reboot. When practical, reboots will be performed between midnight and 6:00 AM Eastern Time, though urgent security conditions may require action outside that window. No customer action is required at this time unless contacted directly by Reliable Penguin support. References https://nvd.nist.gov/vuln/detail/CVE-2026-46333 https://tuxcare.com/cve-tracker/cve/details/cve-2026-46333 https://almalinux.org/blog/2026-05-15-ssh-keysign-pwn-cve-2026-46333/ https://blog.cloudlinux.com/ptrace-exit-race-cve-2026-46333-mitigation-and-kernel-update https://lwn.net/Articles/1073060/ https://thehackernews.com/2026/05/9-year-old-linux-kernel-flaw-enables.html
| |
Comments (0)