OpenSC/pam_pkcs11

Releases16

Frequency1 year 3 months

Last Release over 1 year ago

Stars77

This Linux-PAM login module allows a X.509 certificate based user login

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-24531 ↗	Jan 16, 2026Friday, 16 January 2026, 18:16	6.7 MEDIUM	—
In OpenSC pam_pkcs11 before 0.6.13, pam_sm_authenticate() wrongly returns PAM_IGNORE in many error situations (such as an error triggered by a smartcard before login), allowing authentication bypass.