← CVE Intelligence

CVE-2025-6020

Linux-pam: linux-pam directory traversal PUBLISHED

Description (CNA)

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 1.7.1
Red Hat / Red Hat Enterprise Linux 10unaffected 0:1.6.1-8.el10 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:1.6.1-8.el10_0 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:1.1.8-23.el7_9.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:1.3.1-37.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:1.3.1-38.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:1.3.1-8.el8_2.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:1.3.1-14.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:1.3.1-16.el8_6.2 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:1.3.1-16.el8_6.2 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:1.3.1-16.el8_6.2 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:1.3.1-26.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:1.3.1-26.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.5.1-26.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.5.1-25.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.5.1-26.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.5.1-25.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:1.5.1-9.el9_0.2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:1.5.1-15.el9_2.1 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:1.5.1-24.el9_4 before *
Red Hat / Red Hat Web Terminal 1.11 on RHEL 9unaffected 1.11-19 before *
Red Hat / Red Hat Web Terminal 1.11 on RHEL 9unaffected 1.11-8 before *
Red Hat / Red Hat Web Terminal 1.12 on RHEL 9unaffected 1.12-4 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1752066672 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1752065732 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1752065732 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-3.1752065737 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1752065731 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-25 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1752065736 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-2.1752065733 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1752065755 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-11 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-11 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-11 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-10 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-10 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-4 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-9 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-12 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-18 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-11 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-7 before *
Red Hat / cert-manager operator for Red Hat OpenShift 1.16unaffected v1.16.5-1760515757 before *
Red Hat / Compliance Operator 1unaffected 1.8.0 before *
Red Hat / Red Hat Discovery 2unaffected 2.0.0-1752592913 before *
Red Hat / Red Hat Discovery 2unaffected 2.2.1-1758555934 before *
Red Hat / Red Hat Insights proxy 1.5unaffected 1.5.7-1759331989 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1752046452 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1752046437 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1752046439 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1752070865 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1752070873 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1751993590 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1752070827 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1752070833 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1752070866 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757422110 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757421804 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757421879 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757422401 before *

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

siemens-SADP

No English description supplied.