pam_authnft vulnerabilities

1 known vulnerability in pam_authnft from Identd-ng. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  pam_authnft: Out-of-bounds Read

  CVE-2026-43916May 12, 2026Identd-ng

  pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior to 0.2.0-alpha, a heap buffer over-read in peer_lookup_tcp (src/peer_lookup.c:134, prior to the fix) allowed a crafted NETLINK_SOCK_DIAG re