The 4th Linux kernel flaw this month can lead to stolen SSH host keys

ZDNet reports that Qualys disclosed a Linux kernel vulnerability (the fourth kernel flaw reported that month) that can allow attackers to exfiltrate SSH host private keys. A patch is available but not yet packaged for all distributions; admins are advised to apply vendor/kernel updates promptly and, if the system may have been exposed, rotate/regenerate SSH host keys and replace them across known clients. Additional mitigations include rebooting into the patched kernel, auditing systems for signs of compromise, and following vendor advisories for backported fixes.