CVE-2024-10041 Pam: libpam: libpam vulnerable to read hashed password

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerabilities in libpam and linux-pam Disclosed Two vulnerabilities have been reported in the libpam and linux-pam libraries. CVE-2024-10041 affects libpam, allowing for the reading of hashed passwords, while CVE-2025-6020 pertains to linux-pam. Both vulnerabilities were published on February 18, 2026, with their respective CVE dates earlier in 2024 and 2025. 2 sources 35