CVE-2024-6387

OpenSSH released fixes for CVE-2024-6387, a signal-handler race condition in sshd on glibc-based Linux that can permit unauthenticated RCE as root; exploitation is complex (requiring prolonged connections and distro-specific knowledge), has only been demonstrated on 32-bit systems, and no in-the-wild exploitation has been reported. The bulletin recommends upgrading OpenSSH per distribution advisories, or applying mitigations such as setting LoginGraceTime to 0 and using blocking solutions like fail2ban until patched.