linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pamUpgrade pam-docsUpgrade pam-devel | May 8, 2024 | Feb 6, 2024 |
| Alpine Linux | — | Upgrade linux-pam | Mar 21, 2024 | Feb 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade pamUpgrade pam-debuginfoUpgrade pam-devel | Feb 8, 2024 | Feb 6, 2024 |
| Amazon_linux_2023 | — | Upgrade pamUpgrade pam-debugsourceUpgrade pam-docsUpgrade pam-develUpgrade pam-debuginfo | Feb 17, 2025 | Jan 18, 2024 |
| Debian | — | Upgrade pam | May 15, 2025 | Feb 6, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade pam | Mar 13, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade pam | Mar 13, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade pam | May 31, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pam-develUpgrade pam | Jul 23, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade pam | Apr 9, 2024 | Feb 6, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade pam-develUpgrade pam-docsUpgrade pam | May 7, 2024 | Jan 18, 2024 |
| Redhat_linux | — | Upgrade pam-debugsourceUpgrade pam-develUpgrade pamUpgrade pam-debuginfoUpgrade pam-docsNo solution exists | May 1, 2024 | Feb 6, 2024 |
| Rocky_linux | — | Upgrade pam-debuginfoUpgrade pam-debugsourceUpgrade pamUpgrade pam-devel | Jun 17, 2024 | Feb 6, 2024 |
| Suse | — | Upgrade pam-extraUpgrade pam-docUpgrade pam-manpagesUpgrade pam-devel-32bitUpgrade pam-develUpgrade pam-32bitUpgrade pamUpgrade pam-extra-32bit | Jan 19, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade libpam-modules (Ubuntu Pro)Upgrade libpam-modules | Jan 18, 2024 | Jan 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub