vulnerability

Rocky Linux: CVE-2025-8941: pam (Multiple Advisories)

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Oct 10, 2025
Added
Feb 5, 2026
Modified
Feb 5, 2026

Description

A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020.

Solutions

rocky-upgrade-pamrocky-upgrade-pam-debuginforocky-upgrade-pam-debugsourcerocky-upgrade-pam-develrocky-upgrade-pam-docs

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today