Wind River Support Network

HomeDefectsLIN1024-5220

Fixed

LIN1024-5220 : Security Advisory - libpam - CVE-2024-10963

Created: Nov 7, 2024 Updated: Oct 21, 2025

Resolved Date: Oct 9, 2025

Found In Version: 10.24.33.1

Fix Version: 10.24.33.13

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Userspace

Description

A vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames, undermining configurations designed to limit access to specific TTYs or services. The flaw poses a risk in environments relying on these configurations for local access control.

CVEs

CVE-2024-10963