VYPR

Pam Usb

by Aluzzardi

Source repositories

CVEs (2)

  • CVE-2026-48982Jun 18, 2026
    risk 0.00cvss epss

    pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior to 0.9.2, when updating a one-time pad file, a temporary file is created using open() without the O_EXCL flag. Without O_EXCL, the create operation is not atomic: two concurrent…

  • CVE-2026-48986Jun 18, 2026
    risk 0.00cvss epss

    pam_usb provides hardware authentication for Linux using removable media. In pam_usb 0.9.1 and earlier, usb_get_process_parent_id() can cause an infinite loop DoS because it does not initialize *ppid on failure. In pusb_local_login(), the same variable is reused as input and…