Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Summary
Ars Technica reports a vulnerability affecting Alpine Linux configurations with OpenSSH and musl that can allow passwordless SSH login under specific conditions. Exploitation involves a single connection and a password field input of more than 256 characters, with potential root access on affected accounts via sudo or doas. Patches from Alpine and OpenSSH are available, and users should audit and update affected systems promptly; there is no assigned CVE yet, but the risk spans containers and embedded deployments.