Security researchers have identified two security flaws in Linux that let attackers gain access to password hashes by forcing programs to crash.