New OpenSSH Vulnerability Discovered: Potential Remote Code Execution Risk

A successful CVE-2024-6409 attack could potentially allow an attacker to perform remote code execution (RCE) within the unprivileged user running the sshd server1. This vulnerability arises from a race condition in signal handling within the privilege separation (privsep) child process in OpenSSH versions 8.7 and 8.8.

The CVSS score of CVE-2024-6409 is 7.0. This vulnerability is a signal handler race condition vulnerability found in OpenSSH's server (sshd) in Red Hat Enterprise Linux 9. It is distinct from CVE-2024-6387 and relates to code execution in the privsep child process due to a race condition in signal handling4.