When
pam_exec(8) is used for authentication with the `expose_authtok' option and an application calls
pam_setcred(3), it attempts to expose an already stored authentication token. It is incorrectly assumed that there always is such a token stored, which leads to dereferencing a NULL pointer if this isn't the case.
