A vulnerability identified as problematic has been detected in Linux-PAM up to 1.7.2. This issue affects the function strncmp of the file modules/pam_userdb/pam_userdb.c. Performing a manipulation results in observable timing discrepancy.

This vulnerability is cataloged as CVE-2026-54411. It is possible to initiate the attack remotely. There is no exploit available.