diff --git a/blog/2026-05-10-kernel-root-exploits.md b/blog/2026-05-10-kernel-root-exploits.md
index 688951d6eb..df866b4a5c 100644
--- a/blog/2026-05-10-kernel-root-exploits.md
+++ b/blog/2026-05-10-kernel-root-exploits.md
@@ -95,8 +95,8 @@ coalescing. It has gotten CVE-2026-46300.
 This LPE is unrelated to the others; under certain circumstances, the kernel
 fails to prevent the dumping of process memory under ptraces, which can be used
 to read out sensitive data. As it can be used to read e.g. ssh keys, it has been called
-[ssh-keysign-pwn](https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn). It has
-gotten CVE-2026-46333.
+[ssh-keysign-pwn](https://korben.info/en/ssh-keysign-pwn-linux-kernel-flaw-9-years.html).
+It has been assigned CVE-2026-46333.
 
 This vulerability allows local attackers to read sensitive data (Information
 Disclosure - ID) which may be useful to escalate privileges.
@@ -143,7 +143,7 @@ install algif_aead /bin/false
 The fixes for Dirty Frag are still in development as of May 8. The first fixes
 have been merged upstream and released in 7.0.5, 6.18.28, 6.12.87, 6.6.138,
 6.1.172, 5.15.206 and 5.10.255 but there is
-[more to come for rxrpc](https://lwn.net/ml/all/2026050859-ahead-anchovy-05e2@gregkh/).
+more to come for rxrpc. <!--https://lwn.net/ml/all/2026050859-ahead-anchovy-05e2@gregkh/-->
 Update 2026-05-11: 7.0.6 and 6.18.29 contain this last patch, older kernels don't need it.
 The responsible disclosure process for Dirty Frag unfortunately failed due to the
 [patches being spotted](https://www.openwall.com/lists/oss-security/2026/05/07/12),