CVE-2026-54411 | Linux-PAM up to 1.7.2 pam_userdb.c strncmp timing discrepancy (EUVD-2026-36662)

June 14, 2026 Yanac

A vulnerability identified as problematic has been detected in Linux-PAM up to 1.7.2. This issue affects the function strncmp of the file modules/pam_userdb/pam_userdb.c. Performing a manipulation results in observable timing discrepancy.

This vulnerability is cataloged as CVE-2026-54411. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More