CVE-2026-43916

Description

pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior to 0.2.0-alpha, a heap buffer over-read in peer_lookup_tcp (src/peer_lookup.c:134, prior to the fix) allowed a crafted NETLINK_SOCK_DIAG reply to slip past the message-size check, then dereference past the end of the allocation. This vulnerability is fixed in 0.2.0-alpha.

PUBLISHED Reserved 2026-05-04 | Published 2026-05-12 | Updated 2026-05-13 | Assigner GitHub_M

Problem types

CWE-125: Out-of-bounds Read

CWE-191: Integer Underflow (Wrap or Wraparound)

Product status

References

github.com/...uthnft/security/advisories/GHSA-5jj5-hm34-78vh

github.com/identd-ng/pam_authnft/pull/10

cve.org (CVE-2026-43916)

nvd.nist.gov (CVE-2026-43916)

Download JSON