Is Your Ubuntu Kernel Patched Against ssh-keysign-pwn (CVE-2026-46333)? A 60-Second Changelog Check CVE-2026-46333 lets a local user read /etc/shadow and SSH host keys. Cloud kernels have their own version numbers, so here is a check that works on any Ubuntu kernel, run on a real server, plus the ptrace mitigation. Oct 19, 2026 6 min read Linux