Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 431
Alerts This Week
Warning Icon 1 431

SUSE 2026-3162-1 pam Moderate Timing Discrepancy Vulnerability

suse
Calendar Grey July 21, 2026
Scroller Suse
A security update addressing the pam module's timing discrepancy vulnerability ensures improved security for SUSE systems.
A SUSE update released on July 21, 2026, addresses a vulnerability in the pam module related to plaintext password comparison, applicable to specific SUSE Linux Enterprise Server v...

Summary

## This update for pam fixes the following issue * CVE-2026-54411: timing discrepancy in the pam_userdb module's plaintext- password comparison (bsc#1268290). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3162=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * pam-extra-debuginfo-1.1.8-24.80.1 * pam-debuginfo-32bit-1.1.8-24.80.1 * pam-extra-debuginfo-32bit-1.1.8-24.80.1 * pam-1.1.8-24.80.1 * pam-devel-1.1.8-24.80.1 * pam-extra-32bit-1.1.8-24.80.1

Topics%20covered

Topics Covered

security advisory moderate SuSE authentication issue PAM timing discrepancy

References

* bsc#1268290

Cross-

* CVE-2026-54411

CVSS scores:

* CVE-2026-54411 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2026-54411 ( NVD ): 6.9

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X

* CVE-2026-54411 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products:

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security

* SUSE Linux Enterprise Server for SAP Applications 12 SP5

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2026-54411.html

* https://bugzilla.suse.com/show_bug.cgi?id=1268290

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3162-1
Release Date: 2026-07-21T14:50:38Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate SuSE authentication issue PAM timing discrepancy

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.