CVE Intelligence

Identd-ng vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Identd-ng products: 1 record(s), with severity, exploitation and fixes.

Pam Authnft 1

Exploited only (KEV) →

CVE-2026-43916 High · 8.7 CWE-125 May 12, 2026
pam_authnft: Heap buffer overflow in NETLINK_SOCK_DIAG reply walker
pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior to 0.2.0-alpha, a heap buffer over-read in peer_lookup_tcp (src/peer_lookup.c:134, prior to the fix) allowed a crafted NETLINK_SOCK_DIAG reply to slip past the message-size check, then dereference past the end of the allocation. This vulnerability is fixed in 0.2.0-alpha.