QwikSec

Security Database

CVE

CWE

Training

CVE-2026-43916

Published: May 12, 2026

Modified: May 13, 2026

PUBLISHED

Description

pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior to 0.2.0-alpha, a heap buffer over-read in peer_lookup_tcp (src/peer_lookup.c:134, prior to the fix) allowed a crafted NETLINK_SOCK_DIAG reply to slip past the message-size check, then dereference past the end of the allocation. This vulnerability is fixed in 0.2.0-alpha.

Vendor	Product	Versions
identd-ng	pam_authnft	affected `< 0.2.0-alpha`

Weaknesses (CWE)

References

https://github.com/identd-ng/pam_authnft/security/advisories/GHSA-5jj5-hm34-78vh

x_refsource_CONFIRM

https://github.com/identd-ng/pam_authnft/pull/10

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.