Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-6020

Linux-pam: linux-pam directory traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

linux-pam

Default version status: unaffected

  • 0 to < 1.7.1affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:1.6.1-8.el10 to < *unaffected

Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Default version status: affected

  • 0:1.6.1-8.el10_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Default version status: affected

  • 0:1.1.8-23.el7_9.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:1.3.1-37.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:1.3.1-38.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support

Default version status: affected

  • 0:1.3.1-8.el8_2.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Default version status: affected

  • 0:1.3.1-14.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Default version status: affected

  • 0:1.3.1-16.el8_6.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Default version status: affected

  • 0:1.3.1-16.el8_6.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

Default version status: affected

  • 0:1.3.1-16.el8_6.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Default version status: affected

  • 0:1.3.1-26.el8_8.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Default version status: affected

  • 0:1.3.1-26.el8_8.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.5.1-26.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.5.1-25.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.5.1-26.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.5.1-25.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Default version status: affected

  • 0:1.5.1-9.el9_0.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Default version status: affected

  • 0:1.5.1-15.el9_2.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

Default version status: affected

  • 0:1.5.1-24.el9_4 to < *unaffected

Red Hat Red Hat Web Terminal 1.11 on RHEL 9

Default version status: affected

  • 1.11-19 to < *unaffected

Red Hat Red Hat Web Terminal 1.11 on RHEL 9

Default version status: affected

  • 1.11-8 to < *unaffected

Red Hat Red Hat Web Terminal 1.12 on RHEL 9

Default version status: affected

  • 1.12-4 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1752066672 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1752065732 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1752065732 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-3.1752065737 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1752065731 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-25 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1752065736 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-2.1752065733 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1752065755 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-11 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-11 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-11 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-10 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-10 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-4 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-9 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-12 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-18 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-11 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-7 to < *unaffected

Red Hat cert-manager operator for Red Hat OpenShift 1.16

Default version status: affected

  • v1.16.5-1760515757 to < *unaffected

Red Hat Compliance Operator 1

Default version status: affected

  • 1.8.0 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 2.0.0-1752592913 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 2.2.1-1758555934 to < *unaffected

Red Hat Red Hat Insights proxy 1.5

Default version status: affected

  • 1.5.7-1759331989 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.6.0

Default version status: affected

  • rhosdt-3.6-1752046452 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.6.0

Default version status: affected

  • rhosdt-3.6-1752046437 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.6.0

Default version status: affected

  • rhosdt-3.6-1752046439 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.6.0

Default version status: affected

  • rhosdt-3.6-1752070865 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.6.0

Default version status: affected

  • rhosdt-3.6-1752070873 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.6.0

Default version status: affected

  • rhosdt-3.6-1751993590 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.6.0

Default version status: affected

  • rhosdt-3.6-1752070827 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.6.0

Default version status: affected

  • rhosdt-3.6-1752070833 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.6.0

Default version status: affected

  • rhosdt-3.6-1752070866 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757422110 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757421804 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757421879 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757422401 to < *unaffected

References