Description
The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. An attacker must have physical access to the computer system and requires a crafted USB device or smart card to present the system with specially crafted responses to the APDUs, which are considered high complexity and low severity. This manipulation can allow for compromised card management operations during enrolment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | opensc | 0.25.0 | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | opensc | 0.25.0~rc1-1 | — |
| Debian 13 | opensc | 0.25.0~rc1-1 | — |
| Debian 12 | opensc | 0.23.0-0.3+deb12u2 | — |
| Debian 11 | opensc | 0.21.0-1+deb11u1 | DLA-4004-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | opensc | 0.24.0-2.1 | openSUSE-SU-2024:13733-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | opensc | 0.25.1-r0 | — |
| Alpine v3.23 | opensc | 0.25.1-r0 | — |
| Alpine v3.22 | opensc | 0.25.1-r0 | — |
| Alpine v3.21 | opensc | 0.25.1-r0 | — |
| Alpine v3.20 | opensc | 0.25.1-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | opensc | 0.24.0-1.amzn2023.0.3 | ALAS2023-2024-580 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | opensc | 0.25.1-3 | — |
| Azure Linux 2 (CBL-Mariner) | opensc | 0.23.0-4 | — |
Advisories 4
- DLA-4004-1 opensc - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:13733-1 opensc-0.24.0-2.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2024-0354 OpenSC: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Dec 29, 2024
- ALAS2023-2024-580 Moderate: opensc security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Mar 27, 2024