Exposed sshd -- looping sshd-auth

Theo de Raadt deraadt at openbsd.org
Tue Sep 22 08:56:20 AEST 2026


  9980      1 sshd-auth poll(0x7f7fffffe4b0, 0x1, 0xffffffff) = 1
  9980      1 sshd-auth read(0x5, 0x7f7fffffe53f, 0x1) Err#35 EAGAIN

- poll with 1 descriptor, which is only checking POLLIN 

- returns 1, that means the kernel says this socket can read at
  least one byte (sucessfully), or detect EOF from reading 0

- but the subsequent read() returns EAGAIN/EWOUDBLOCK

The kernel does not seem to be following the contract correctly.




More information about the openssh-unix-dev mailing list