OpenSSH regreSSHion CVE-2024-6387 Vulnerability: Exploitation & Mitigation

CVE-2024-6387 (“regreSSHion”) is a critical OpenSSH regression affecting glibc-based Linux systems that can enable unauthenticated remote code execution as root via a signal-handler race condition; Qualys reports roughly 14 million potentially vulnerable servers. Affected builds include a regression introduced in OpenSSH 8.5p1 (notably 8.5p1–9.7p1 and older unpatched releases); vendors have published fixes and recommended mitigations (apply patches, restrict SSH access, adjust LoginGraceTime) to prevent full system compromise.