CVE-2025-6020

Linux-pam: linux-pam directory traversal

Description

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading

Score

7.8

Severity

High

Ecosystem

RPM

Publish Date

June 17, 2025

Modified Date

July 8, 2026

Score Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Versions