Issues
ssh-keysign-pwn
Race condition in the Linux kernel process exit sequence allows unprivileged users to steal file descriptors from exiting privileged processes, enabling theft of SSH host keys and /etc/shadow.
Copy Fail
Deterministic logic bug in the authencesn cryptographic template allowing unprivileged page-cache writes into setuid binaries and container escape.