CVE-2026-54411— Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison
Possible ATT&CK Techniques 1AI
T1110 · Brute ForceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-54411
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison
Source: CVE Program / CVE List V5
Vulnerability Description
Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过时间差异性导致的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Linux-pam 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux-pam是Linux-pam团队开源的一款Linux身份验证系统。 Linux-PAM 1.7.2及之前版本存在信息泄露漏洞，该漏洞源于pam_userdb模块的明文密码比较路径中存在可观测的时间差异（CWE-208），可能导致本地或网络邻近的攻击者通过反复驱动认证请求来测量响应时间差，从而恢复目标账户的明文密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-54411
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-54411
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-54411 (1)
Vendor Pages for CVE-2026-54411 (1)
Other References for CVE-2026-54411 (2)
IV. Related Vulnerabilities
Same weakness: CWE-208
- CVE-2026-16458
Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto - CVE-2026-16459
Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon - CVE-2026-43606
AMD Vitis 侧信道信息泄露漏洞 - CVE-2025-49506
Apache Portable Runtime Utility: apr_password_validate() vul - CVE-2026-16731
Authentication and authorization bypass via cryptographic ti
V. Comments for CVE-2026-54411
No comments yet