Vulnerabilities in libpam and linux-pam Disclosed

Vulnerabilities in libpam and linux-pam Disclosed

First seen 19 Feb 2026, 06:21 UTC Api.Msrc.Microsoft 35.1

Article Content

Browse articles
ThreatCluster

Two vulnerabilities have been reported in the libpam and linux-pam libraries. CVE-2024-10041 affects libpam, allowing for the reading of hashed passwords, while CVE-2025-6020 pertains to linux-pam. Both vulnerabilities were published on February 18, 2026, with their respective CVE dates earlier in 2024 and 2025.

Timeline

2024-10-23
CVE-2024-10041 published
2025-06-17
CVE-2025-6020 published
2026-02-18
Information published about CVE-2024-10041 and CVE-2025-6020