CVE-2025-6020

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-6020
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
CVSS

No CVSS.

References
Link Resource
http://www.openwall.com/lists/oss-security/2025/06/17/1
https://access.redhat.com/errata/RHSA-2025:10024
https://access.redhat.com/errata/RHSA-2025:10027
https://access.redhat.com/errata/RHSA-2025:10180
https://access.redhat.com/errata/RHSA-2025:10354
https://access.redhat.com/errata/RHSA-2025:10357
https://access.redhat.com/errata/RHSA-2025:10358
https://access.redhat.com/errata/RHSA-2025:10359
https://access.redhat.com/errata/RHSA-2025:10361
https://access.redhat.com/errata/RHSA-2025:10362
https://access.redhat.com/errata/RHSA-2025:10735
https://access.redhat.com/errata/RHSA-2025:10823
https://access.redhat.com/errata/RHSA-2025:11386
https://access.redhat.com/errata/RHSA-2025:11487
https://access.redhat.com/errata/RHSA-2025:9526
https://access.redhat.com/security/cve/CVE-2025-6020
https://bugzilla.redhat.com/show_bug.cgi?id=2372512
Configurations

No configuration.

History

21 Jul 2025, 20:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:11487 -

17 Jul 2025, 20:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:11386 -

10 Jul 2025, 20:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:10823 -

09 Jul 2025, 20:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:10735 -

07 Jul 2025, 08:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:10357 -
  • () https://access.redhat.com/errata/RHSA-2025:10358 -
  • () https://access.redhat.com/errata/RHSA-2025:10359 -
  • () https://access.redhat.com/errata/RHSA-2025:10362 -
  • () https://access.redhat.com/errata/RHSA-2025:10361 -
  • () https://access.redhat.com/errata/RHSA-2025:10354 -

02 Jul 2025, 08:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:10180 -

01 Jul 2025, 20:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:10027 -

01 Jul 2025, 14:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:10024 -

24 Jun 2025, 19:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:9526 -

17 Jun 2025, 16:15

Type Values Removed Values Added
CWE CWE-22
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : unknown
References
  • () http://www.openwall.com/lists/oss-security/2025/06/17/1 -

17 Jun 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-17 13:15

Updated : 2025-07-21 20:15

NVD link : CVE-2025-6020

Mitre link : CVE-2025-6020

JSON object : View

Products Affected

No product.

CWE

No CWE.