Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-6020GHSA-F9P8-GJR4-J9GX

Linux-pam: linux-pam directory traversal

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 1.7.1
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • linux-pam

    fixed in 1.7.1

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • pam

    Version range not reported

  • web-terminal/web-terminal-rhel9-operator

    Version range not reported

  • web-terminal/web-terminal-tooling-rhel9

    Version range not reported

  • web-terminal/web-terminal-tooling-rhel9

    Version range not reported

  • rhpam-7/rhpam-businesscentral-monitoring-rhel8

    Version range not reported

  • rhpam-7/rhpam-businesscentral-rhel8

    Version range not reported

  • rhpam-7/rhpam-controller-rhel8

    Version range not reported

  • rhpam-7/rhpam-dashbuilder-rhel8

    Version range not reported

  • rhpam-7/rhpam-kieserver-rhel8

    Version range not reported

  • rhpam-7/rhpam-operator-bundle

    Version range not reported

  • rhpam-7/rhpam-process-migration-rhel8

    Version range not reported

  • rhpam-7/rhpam-rhel8-operator

    Version range not reported

  • rhpam-7/rhpam-smartrouter-rhel8

    Version range not reported

  • openshift-serverless-1/logic-data-index-ephemeral-rhel8

    Version range not reported

  • openshift-serverless-1/logic-data-index-postgresql-rhel8

    Version range not reported

  • openshift-serverless-1/logic-db-migrator-tool-rhel8

    Version range not reported

  • openshift-serverless-1/logic-jobs-service-ephemeral-rhel8

    Version range not reported

  • openshift-serverless-1/logic-jobs-service-postgresql-rhel8

    Version range not reported

  • openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8

    Version range not reported

  • openshift-serverless-1/logic-management-console-rhel8

    Version range not reported

  • openshift-serverless-1/logic-operator-bundle

    Version range not reported

  • openshift-serverless-1/logic-rhel8-operator

    Version range not reported

  • openshift-serverless-1/logic-swf-builder-rhel8

    Version range not reported

  • openshift-serverless-1/logic-swf-devmode-rhel8

    Version range not reported

  • cert-manager/jetstack-cert-manager-rhel9

    Version range not reported

  • compliance/openshift-compliance-openscap-rhel8

    Version range not reported

  • discovery/discovery-server-rhel9

    Version range not reported

  • insights-proxy/insights-proxy-container-rhel9

    Version range not reported

  • rhosdt/opentelemetry-collector-rhel8

    Version range not reported

  • rhosdt/opentelemetry-rhel8-operator

    Version range not reported

  • rhosdt/opentelemetry-target-allocator-rhel8

    Version range not reported

  • rhosdt/tempo-gateway-opa-rhel8

    Version range not reported

  • rhosdt/tempo-gateway-rhel8

    Version range not reported

  • rhosdt/tempo-jaeger-query-rhel8

    Version range not reported

  • rhosdt/tempo-query-rhel8

    Version range not reported

  • rhosdt/tempo-rhel8

    Version range not reported

  • rhosdt/tempo-rhel8-operator

    Version range not reported

  • openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9

    Version range not reported

  • openshift-sandboxed-containers/osc-monitor-rhel9

    Version range not reported

  • openshift-sandboxed-containers/osc-podvm-builder-rhel9

    Version range not reported

  • openshift-sandboxed-containers/osc-podvm-payload-rhel9

    Version range not reported

References 25

access.redhat.com