Description (CNA)
There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / SUSE Linux Enterprise Server 16.1 | affected ? |
| SUSE / SUSE Linux Enterprise Server for NVIDIA 16.1 | affected ? |
| SUSE / openSUSE Leap 16.1 | affected ? |
| openSUSE / Tumbleweed | affected ? before 947e9dc09ce7c36b35a868e397e30245cc5544a1 |
CWE
CWE-522
References
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-104617
- https://www.suse.com/security/cve/CVE-2026-104617.html
ADP enrichment
No English description supplied.
No references supplied.