Vendor
The pam_usb module incorrectly evaluates remote tmux sessions due to a faulty IPv6 regex, allowing authentication when the deny_remote feature should be triggered.