Linux-pam: incomplete fix for cve-2025-6020

Summary

A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020.

Timeline

1. Aug 13, 2025, 2:42 PM UTCCVE published
2. Aug 14, 2025, 3:56 AM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Feb 26, 2026, 5:48 PM UTCRecord last updated

Affected versions

• linux-pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• pam

  Version range not reported

• web-terminal/web-terminal-rhel9-operator

  Version range not reported

• web-terminal/web-terminal-tooling-rhel9

  Version range not reported

• web-terminal/web-terminal-tooling-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-rhel9

  Version range not reported

• compliance/openshift-compliance-openscap-rhel8

  Version range not reported

• discovery/discovery-server-rhel9

  Version range not reported

• insights-proxy/insights-proxy-container-rhel9

  Version range not reported

• openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9

  Version range not reported

• openshift-sandboxed-containers/osc-monitor-rhel9

  Version range not reported

• openshift-sandboxed-containers/osc-podvm-builder-rhel9

  Version range not reported

• openshift-sandboxed-containers/osc-podvm-payload-rhel9

  Version range not reported

References 19