Skip to content
CVE PROGRAM SOURCE RECORD7.9 High

CVE-2026-44711

pam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption

Description

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and root file corruption. This vulnerability is fixed in 0.8.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mcdope pam_usb

  • < 0.8.7affected

References