CVE-2026-54411

EUVD-2026-36662
Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 24.9%
Debian logo
Debian Releases
Debian Product
Codename
pam
bookworm
postponed
bullseye
postponed
forky
vulnerable
sid
vulnerable
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pam
bionic
needs-triage
focal
needs-triage
jammy
Fixed 1.4.0-11ubuntu2.7
released
noble
Fixed 1.5.3-5ubuntu5.6
released
questing
ignored
resolute
Fixed 1.7.0-5ubuntu3.1
released
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
pam
suse enterprise desktop 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise sap 12 SP5
1.1.8-24.80.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise server 12 SP3
1.1.8-24.80.1
fixed
suse enterprise server 12 SP5
1.1.8-24.80.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.89.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.89.1
fixed
pam-32bit
suse enterprise desktop 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise sap 12 SP5
1.1.8-24.80.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise server 12 SP3
1.1.8-24.80.1
fixed
suse enterprise server 12 SP5
1.1.8-24.80.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.89.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.89.1
fixed
pam-devel
suse enterprise desktop 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise sap 12 SP5
1.1.8-24.80.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise server 12 SP5
1.1.8-24.80.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.89.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.89.1
fixed
pam-devel-32bit
suse enterprise server 15 SP4
1.3.0-150000.6.89.1
fixed
pam-doc
suse enterprise desktop 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise sap 12 SP5
1.1.8-24.80.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise server 12 SP3
1.1.8-24.80.1
fixed
suse enterprise server 12 SP5
1.1.8-24.80.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.89.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.89.1
fixed
pam-extra
suse enterprise desktop 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise sap 12 SP5
1.1.8-24.80.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise server 12 SP3
1.1.8-24.80.1
fixed
suse enterprise server 12 SP5
1.1.8-24.80.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.89.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.89.1
fixed
pam-extra-32bit
suse enterprise desktop 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise sap 12 SP5
1.1.8-24.80.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.89.1
fixed
suse enterprise server 12 SP3
1.1.8-24.80.1
fixed
suse enterprise server 12 SP5
1.1.8-24.80.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.89.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.89.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
pam
RHEL 8
0:1.3.1-40.el8_10
fixed
RHEL 8.4 AUS
0:1.3.1-14.el8_4.3
fixed
RHEL 8.6 AUS
0:1.3.1-16.el8_6.4
fixed
RHEL 8.8 E4S
0:1.3.1-26.el8_8.3
fixed
RHEL 8.8 TUS
0:1.3.1-26.el8_8.3
fixed
RHEL 9
0:1.5.1-28.el9_8.1
fixed
pam-devel
RHEL 8
0:1.3.1-40.el8_10
fixed
RHEL 8.4 AUS
0:1.3.1-14.el8_4.3
fixed
RHEL 8.6 AUS
0:1.3.1-16.el8_6.4
fixed
RHEL 8.8 E4S
0:1.3.1-26.el8_8.3
fixed
RHEL 8.8 TUS
0:1.3.1-26.el8_8.3
fixed
RHEL 9
0:1.5.1-28.el9_8.1
fixed
pam-docs
RHEL 9
0:1.5.1-28.el9_8.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
pam
Azure Linux 3.0
0:1.5.3-5.azl3
fixed
Common Weakness Enumeration
References
https://cwe.mitre.org/data/definitions/208.html
https://github.com/linux-pam/linux-pam
https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h
https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327