A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-pamalma-upgrade-pam-develalma-upgrade-pam-docs | Jul 1, 2025 | Jun 17, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-pamamazon-linux-ami-2-upgrade-pam-debuginfoamazon-linux-ami-2-upgrade-pam-devel | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-pamamazon-linux-2023-upgrade-pam-debuginfoamazon-linux-2023-upgrade-pam-debugsourceamazon-linux-2023-upgrade-pam-develamazon-linux-2023-upgrade-pam-docs | Aug 5, 2025 | Jun 17, 2025 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Jun 17, 2025 |
| Debian | debian-upgrade-pam | Jun 18, 2025 | Jun 18, 2025 | |
| Dell Powerstore Dsa2025429 | dell-powerstoreos-upgrade-latest | Dec 3, 2025 | Dec 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-libs-pam | Aug 7, 2025 | Aug 6, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-pam | Sep 15, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-pam | Oct 14, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-pam | Sep 15, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-pamhuawei-euleros-2_0_sp13-upgrade-pam-hsm | Oct 24, 2025 | Sep 9, 2025 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Dec 2, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-pamoracle-linux-upgrade-pam-develoracle-linux-upgrade-pam-docsoracle-linux-upgrade-pam-libs | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | redhat-upgrade-pamredhat-upgrade-pam-debuginforedhat-upgrade-pam-debugsourceredhat-upgrade-pam-develredhat-upgrade-pam-docsredhat-upgrade-pam-libsredhat-upgrade-pam-libs-debuginfo | Jun 26, 2025 | Jun 17, 2025 | |
| Rocky_linux | rocky-upgrade-pamrocky-upgrade-pam-debuginforocky-upgrade-pam-debugsourcerocky-upgrade-pam-develrocky-upgrade-pam-docsrocky-upgrade-pam-libsrocky-upgrade-pam-libs-debuginfo | Oct 6, 2025 | Oct 4, 2025 | |
| Suse | — | suse-upgrade-pamsuse-upgrade-pam-32bitsuse-upgrade-pam-develsuse-upgrade-pam-devel-32bitsuse-upgrade-pam-docsuse-upgrade-pam-extrasuse-upgrade-pam-extra-32bitsuse-upgrade-pam-manpages | Jun 23, 2025 | Jun 17, 2025 |
| Ubuntu | ubuntu-upgrade-libpam-modules | Jun 20, 2025 | Jun 17, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Feb 9, 2026 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub