Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log into devices with no password.
The vulnerability exists in the interaction between OpenSSH, the code library implementing SSH connections, and musl, a lightweight alternative to the libc library that, unlike most other Linux distributions, is used in Alpine. Further, OpenSSH using musl (pronounced muscle) must not use PAM (pluggable authentication modules), a framework that handles user authentication and account-access checks. Alpine is a lightweight, widely used Linux distribution. Other platforms may be affected if they use the same configurations.
One connection, works every time, needs no retries
There are two other conditions necessary for successful exploitation. First, a system must have at least one user account that’s accessible using a password that is hashed using the SHA256 or SHA512 functions. Second, the target system account must be configured to be passwordless, by way of specifying a “*” in the password field in /etc/shadow, the Linux file where password hashes are stored. Passwordless accounts are commonly used for accounts that use certificate-based authentication. This setting is common for certain types of accounts.
The UV-tracking Gem made me rethink how sunlight affects my health, not just my appearance
November 7, 2026
Discogs’ Kevin Lewandowski can’t live without his AeroPress
November 7, 2026
Costco members can get $5 off the reimagined Ocarina of Time
November 7, 2026
NYT Cooking’s AI assistant saved my weeknight chicken, but almost ruined my cake
November 7, 2026
The US let Nvidia sell chips to an empty office in China
November 7, 2026
AI broke the cybersecurity world. What’s next?
November 7, 2026
Missing Teen Saved From Alleged Kidnapper After Seeking Help in Among Us
November 7, 2026
மொத்தம் 6 டார்க்கெட்.. சவுதியின் இதயத்தில் விழும் அடி.. ருத்ரதாண்டவமாடும் ஹவுதிகள்! பதற்றம்
November 7, 2026
Chelsea surrender top spot after home draw with Everton
November 7, 2026
Shaw hat-trick gives five-star Man City dominant win over West Ham
November 7, 2026
Seventh-tier Guiseley stun Sutton with stoppage-time penalty
November 7, 2026
National League Carlisle upset League Two leaders Salford
November 7, 2026