rewindex

CompaniesLinode (Akamai)Incidents

Linode (Akamai): Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability [CVE-2026-123158]

No impact listedStatus: resolvededitedStarted Resolved (0 min)1 updatestatus.linode.com (opens in new tab)

Affected components: Linode.com

Timeline of updates

  1. resolved

    Akamai is aware of the password authentication bypass vulnerability affecting certain Linux systems using musl libc that was recently mitigated by an urgent OpenSSH update. Since Alpine Linux is specifically called out as being affected, we wanted to assure customers that Linode’s Alpine images are not affected by this vulnerability. Linodes using password-less provisioning do not have password authentication enabled by default unless customers change this configuration option in sshd_config after launch, while linodes launched using a password do not have any unlocked user accounts with a password hash set to ‘*’.
    However, we would like to use this opportunity as a reminder for customers to consider disabling password authentication permanently in favor of more secure mechanisms such as SSH keys or SSH CA certificates.

Changes Rewindex caught on this incident

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Rewindex captured a newer version after the last checkpoint; the next run () commits it.

Impact, status and times are the vendor’s own, as last archived. View on status.linode.com (opens in new tab).

Cite this

Status incident (vendor impact label: none) posted by Linode (Akamai), started 2026-11-05 17:40 UTC, resolved after 0 min, 1 update(s); edited after publishing.

Title
Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability [CVE-2026-123158]
Vendor
Linode (Akamai)
Date
URL
https://rewindex.com/company/linode-akamai/incidents/fc9c3k1n3ph1

Linode (Akamai) profileRecent Linode (Akamai) incidentsAll outages on November 5, 2026Linode (Akamai) in November 2026MarkdownJSON