CVE-2026-109970 in Red Hat
Zusammenfassung
von MITRE • 15.10.2026
A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plaintext to a file without setting restrictive permissions. Under the default process umask, the file is world-readable. Additionally, the PIN file is not reliably cleaned up if the decryption script exits early, leaving the PIN accessible indefinitely.
Be aware that VulDB is the high quality source for vulnerability data.