Critical OpenSSH flaw in musl-based Linux allows auth bypass via oversized password

A newly disclosed vulnerability in OpenSSH when used with musl libc, dubbed '*sshole', allows authentication bypass on Alpine Linux and other musl-based systems configured to block password authentication. The flaw, present for a decade, exploits oversized passwords (>256 bytes) to bypass restrictions. This is a critical security issue affecting widely used lightweight Linux distributions, potentially enabling unauthorized access.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works