Authentication Bypass in pam_usb for Linux Affects Removable Media Components

CVE-2026-44711

What is CVE-2026-44711?

The pam_usb module, which provides hardware authentication for Linux systems via removable media, has a vulnerability that allows an attacker to perform symlink attacks on pad directories and files. This can lead to an authentication bypass, enabling the potential for unauthorized root access and file corruption. The issue is addressed in pam_usb version 0.8.7, which mitigates these risks by securing the handling of symlink interactions.

References