CVE-2026-43916: identd-ng pam_authnft, грешка в паметта

Описание

Оригинално описание

pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior to 0.2.0-alpha, a heap buffer over-read in peer_lookup_tcp (src/peer_lookup.c:134, prior to the fix) allowed a crafted NETLINK_SOCK_DIAG reply to slip past the message-size check, then dereference past the end of the allocation. This vulnerability is fixed in 0.2.0-alpha.

Засегнати продукти

• identd-ng pam_authnft: < 0.2.0-alpha

Вид слабост

• CWE-125 Четене извън границите на буфера
• CWE-191 Целочислено препълване отдолу

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-43916
• https://nvd.nist.gov/vuln/detail/CVE-2026-43916
• https://github.com/identd-ng/pam_authnft/security/advisories/GHSA-5jj5-hm34-78vh
• https://github.com/identd-ng/pam_authnft/pull/10