A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pam-develUpgrade pam-docsUpgrade pam | Jul 1, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade pam-debuginfoUpgrade pamUpgrade pam-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade pam-debuginfoUpgrade pamUpgrade pam-docsUpgrade pam-develUpgrade pam-debugsource | Aug 5, 2025 | Jun 17, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade pam | Jun 18, 2025 | Jun 18, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Gentoo Linux | — | Upgrade sys-libs/pam. | Aug 7, 2025 | Aug 6, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade pam | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade pam | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade pam | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade pamUpgrade pam-hsm | Oct 24, 2025 | Sep 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 2, 2025 |
| Oracle_linux | — | Upgrade pam-docsUpgrade pam-libsUpgrade pamUpgrade pam-devel | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade pamUpgrade pam-develUpgrade pam-debugsourceUpgrade pam-libs-debuginfoUpgrade pam-libsUpgrade pam-docsUpgrade pam-debuginfo | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade pam-debugsourceUpgrade pam-libsUpgrade pam-docsUpgrade pamUpgrade pam-debuginfoUpgrade pam-develUpgrade pam-libs-debuginfo | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade pam-extraUpgrade pam-docUpgrade pam-devel-32bitUpgrade pam-extra-32bitUpgrade pamUpgrade pam-32bitUpgrade pam-develUpgrade pam-manpages | Jun 23, 2025 | Jun 17, 2025 |
| Ubuntu | — | Upgrade libpam-modules | Jun 20, 2025 | Jun 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub