Craig Lawson

**Name of the Vulnerable Software and Affected Versions** util-linux version 2.12a **Description** The issue allows users to bypass intended access policies that would be enforced by `pam acct mgmt` and `chauth tok` when authentication is skipped, such as in a Kerberos krlogin session. This might enable users to circumvent access controls. **Recommendations** For util-linux version 2.12a, consider updating to a newer version that addresses this issue, as the current version may allow users to bypass access policies. At the moment, there is no information about a newer version that contains a fix for this vulnerability.