PT-2026-90014 · Canonical · Pam

Published

2026-09-01

·

Updated

2026-09-01

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
USN-8688-1 fixed a vulnerability in PAM. This update provides the corresponding fix for PAM on Ubuntu 26.04 LTS.
Original advisory details:
Juthawong Naisanguansee discovered that PAM incorrectly cleared failed login attempt records when certain services invoked the account phase without first performing authentication. An attacker could possibly use this issue to reset failed login counters, resulting in authentication lockout restrictions being bypassed.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

USN-8688-2

Affected Products

Pam