Threats affecting pkg:github/identd-ng/pam_authnft

CVE-2026-43916 is a high-severity vulnerability in the pam_authnft module of identd-ng versions prior to 0.2.0-alpha. It involves a heap buffer over-read caused by improper handling of crafted NETLINK_SOCK_DIAG replies in the peer_lookup_tcp function. This flaw allows reading beyond allocated memory boundaries, potentially leading to information disclosure or application instability. The vulnerability has been fixed in version 0.2.0-alpha. No known exploits are reported in the wild at this time.