UBUNTU-CVE-2026-109971

A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem...

DEBIAN-CVE-2026-109971

A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem...

CVE-2026-109971

A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem. Mitigation No end-user mitigation is available for this issue. Th...

CVE-2026-109971: Invocation of Process Using Visible Sensitive Information

A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem...

Linux Distros Unpatched Vulnerability : CVE-2026-109971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it...

Red Hat Enterprise Linux information leakage vulnerability

Red Hat Enterprise Linux versions 7, 8, 9, and 10 have a vulnerability related to information leakage. This vulnerability stems from the clevis-decrypt-pkcs11 script in clevis PKCS11, which passes the PKCS11 token PIN as a command-line parameter to the pkcs11-tool. This could allow any local user...