CVE-2026-46333: Local Root Privilege Escalation and Credential Disclosure in the Linux Kernel ptrace Path
Qualys TRU disclosed CVE-2026-46333, a 9-year-old logic flaw in the Linux kernel's __ptrace_may_access() that lets unprivileged users escalate to root. The bug (present since 2016) enables credential disclosure (SSH keys, /etc/shadow) and arbitrary command execution on major Linux distributions. Patches are available; working exploits are circulating.