Product
musl
- First Reported
- Nov 5, 2026
- Latest Reported
- Nov 6, 2026
Reported Context (2)
- of 8.1), the security defect affects the OpenSSH server (sshd) on Linux distributions that use the musl libc implementation with the Pluggable Authentication Module (PAM) disabled. OpenSSH Patches SSHole Authentication Bypass Affecting Some Linux Configurations
- The flaw comes from how sshd works with musl, the C library that Alpine is built on. Non-Linux systems, Linux systems built on glibc, and systems that check passwords through PAM are not affected, said Damien Miller of OpenSSH 10.6p2 Fixes Critical Long-Password Authentication Bypass on Alpine Linux
CVE (2)
People (4)
MITRE ATT&CK (1)
Vendors (2)
Products (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.