# Linode (Akamai): Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability [CVE-2026-123158]

> Linode (Akamai) status incident “Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability [CVE-2026-123158]” on 2026-11-05: impact none (vendor’s label), 0 min, 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/linode-akamai/incidents/fc9c3k1n3ph1
Last updated: 2026-11-06T16:03:57Z

- Impact (vendor’s label): none
- Status: resolved · edited after publishing
- Started: 2026-11-05 17:40 UTC · Resolved: 2026-11-05 17:40 UTC · Duration: 0 min
- Updates: 1 · Affected components: Linode.com
- [Vendor status page: https://status.linode.com/incidents/fc9c3k1n3ph1](https://status.linode.com/incidents/fc9c3k1n3ph1)
- [Company: Linode (Akamai)](https://rewindex.com/company/linode-akamai.md)

## Timeline of updates

- **resolved** 2026-11-05 17:40 UTC: Akamai is aware of the password authentication bypass vulnerability affecting certain Linux systems using musl libc that was recently mitigated by an urgent OpenSSH update. Since Alpine Linux is specifically called out as being affected, we wanted to assure customers that Linode’s Alpine images are not affected by this vulnerability. Linodes using password-less provisioning do not have password authentication enabled by default unless customers change this configuration option in sshd\_config after launch, while linodes launched using a password do not have any unlocked user accounts with a password hash set to ‘\*’. However, we would like to use this opportunity as a reminder for customers to consider disabling password authentication permanently in favor of more secure mechanisms such as SSH keys or SSH CA certificates.

## Rewindex changes for this incident

- 2026-11-06 16:03 UTC: [Incident silently edited: Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability \[CVE-2026-123158\]](https://rewindex.com/change/r0c35feeca02a16.md)

## Cite this

Status incident (vendor impact label: none) posted by Linode (Akamai), started 2026-11-05 17:40 UTC, resolved after 0 min, 1 update(s); edited after publishing.

- Canonical URL: https://rewindex.com/company/linode-akamai/incidents/fc9c3k1n3ph1
- Citation: Linode (Akamai), “Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability [CVE-2026-123158]” (2026-11-05 17:40 UTC). Archived by Rewindex: https://rewindex.com/company/linode-akamai/incidents/fc9c3k1n3ph1 (CC BY 4.0).
- Markdown link: `[Linode (Akamai): Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability CVE-2026-123158 (2026-11-05)](https://rewindex.com/company/linode-akamai/incidents/fc9c3k1n3ph1)`


---
Canonical: https://rewindex.com/company/linode-akamai/incidents/fc9c3k1n3ph1 · Markdown: https://rewindex.com/company/linode-akamai/incidents/fc9c3k1n3ph1.md · JSON: https://rewindex.com/api/v1/companies/linode-akamai/incidents/fc9c3k1n3ph1 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-06T21:44:40.046Z