Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-24031 EUVD-2025-3601

PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN

Published Feb 10, 2025 · Updated Feb 10, 2025 · Assigned by GitHub_M

Description

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, `pam_get_pwd` will never initialize the password buffer pointer and as such `cleanse` will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.

Affected products

VendorProductAffectedFixed
OpenSC pam_pkcs11 <= 0.6.12 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 pam-pkcs11 No fix yet —
Debian 13 pam-pkcs11 No fix yet —
Debian 12 pam-pkcs11 No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 pam-pkcs11 No fix yet —
Ubuntu 26.04 LTS pam-pkcs11 No fix yet —
Ubuntu 25.10 pam-pkcs11 No fix yet —
Ubuntu 24.04 LTS pam-pkcs11 No fix yet —
Ubuntu 22.04 LTS pam-pkcs11 No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS pam-pkcs11 No fix yet —
Ubuntu Pro 18.04 LTS pam-pkcs11 No fix yet —
Ubuntu Pro 16.04 LTS pam-pkcs11 No fix yet —
ReleasePackageFixed inAdvisory
SLES 15 SP6 pam_pkcs11 0.6.10-150600.16.3.1 SUSE-SU-2025:0689-1
SLES 12 SP5 pam_pkcs11 0.6.8-7.8.1 SUSE-SU-2025:0688-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE Micro 6.0 pam_pkcs11 0.6.12-3.1 SUSE-SU-2025:20199-1
SLE Micro 5.5 pam_pkcs11 0.6.10-150100.3.6.1 SUSE-SU-2025:0712-1
SLE Micro 5.4 pam_pkcs11 0.6.10-150100.3.6.1 SUSE-SU-2025:0712-1
SLE Micro 5.3 pam_pkcs11 0.6.10-150100.3.6.1 SUSE-SU-2025:0712-1
SLE Micro 5.2 pam_pkcs11 0.6.10-150100.3.6.1 SUSE-SU-2025:0712-1
SLE Micro 5.1 pam_pkcs11 0.6.10-150100.3.6.1 SUSE-SU-2025:0712-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.6 pam_pkcs11 0.6.10-150600.16.3.1 SUSE-SU-2025:0689-1

Advisories 4

References