{
  "id": 18357426,
  "title": "Get root on a musl Linux system by slamming it with an overly long password",
  "url": "https://urgent.news/2026/11/05/get-root-on-a-musl-linux-system-by-slamming-it-with-an-overly-long-18357426",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-05T18:29:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/11/05/get-root-on-a-musl-linux-system-by-slamming-it-with-an-overly-long-password/5307910"
  },
  "original_language": "en",
  "account": "A vulnerability dubbed *sshole in OpenSSH on Linux systems running the musl libc, which is common in embedded Linux systems, allows attackers to gain root access under very specific conditions. Musl libc, the standard C library for Alpine Linux, which provides official cloud images for AWS and Azure, has a flaw that dates back to 2016. It affects systems running OpenSSH without Pluggable Authentication Modules (PAM), with password authentication enabled, and at least one account with a valid password hash. Attackers can exploit this by entering a password between 257 and 1,024 characters, provided the targeted accounts have an asterisk (*) in their password field. Password authentication remains subject to OpenSSH's configuration, which might seem niche but is not. Musl libc caps passwords at 256 bytes, but returning a single character for failures can lead to denial of service if someone floods a server with a super-long password. OpenSSH fixed this issue in version 10.6p2 (released Thursday), and disabling password authentication should also protect affected systems.",
  "summary": "Decade-old vulnerability in OpenSSH is now fixed, so get a-patchin'",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 4,
    "also_reported_by": [
      {
        "outlet": "LWN",
        "title": "Critical security vulnerability affects OpenSSH on Alpine Linux systems",
        "url": "https://urgent.news/2026/11/05/critical-security-vulnerability-affects-openssh-on-alpine-linux",
        "published": "2026-11-05T11:39:10.000Z"
      },
      {
        "outlet": "Hacker News",
        "title": "Alpine Linux Security advisory: OpenSSH-server password authentication bypass",
        "url": "https://urgent.news/2026/11/05/alpine-linux-security-advisory-openssh-server-password-authentication",
        "published": "2026-11-05T14:44:20.000Z"
      },
      {
        "outlet": "Tom's Hardware",
        "title": "Combined OpenSSH and musl-libc flaws let anyone into Alpine Linux and other distros by typing anything over 256 characters as a password",
        "url": "https://urgent.news/2026/11/05/combined-openssh-and-musl-libc-flaws-let-anyone-into-alpine-linux-and",
        "published": "2026-11-05T18:14:56.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}