CVE-2025-6020CWE-22path-traversal

CVE-2025-6020

High · published June 17, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00472 · 39.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-06-17T17:15Z
References (32)
https://access.redhat.com/errata/RHSA-2025:10024 · [email protected]https://access.redhat.com/errata/RHSA-2025:10027 · [email protected]https://access.redhat.com/errata/RHSA-2025:10180 · [email protected]https://access.redhat.com/errata/RHSA-2025:10354 · [email protected]https://access.redhat.com/errata/RHSA-2025:10357 · [email protected]https://access.redhat.com/errata/RHSA-2025:10358 · [email protected]https://access.redhat.com/errata/RHSA-2025:10359 · [email protected]https://access.redhat.com/errata/RHSA-2025:10361 · [email protected]https://access.redhat.com/errata/RHSA-2025:10362 · [email protected]https://access.redhat.com/errata/RHSA-2025:10735 · [email protected]https://access.redhat.com/errata/RHSA-2025:10823 · [email protected]https://access.redhat.com/errata/RHSA-2025:11386 · [email protected]https://access.redhat.com/errata/RHSA-2025:11487 · [email protected]https://access.redhat.com/errata/RHSA-2025:14557 · [email protected]https://access.redhat.com/errata/RHSA-2025:15099 · [email protected]https://access.redhat.com/errata/RHSA-2025:15709 · [email protected]https://access.redhat.com/errata/RHSA-2025:15827 · [email protected]https://access.redhat.com/errata/RHSA-2025:15828 · [email protected]https://access.redhat.com/errata/RHSA-2025:16524 · [email protected]https://access.redhat.com/errata/RHSA-2025:17181 · [email protected]https://access.redhat.com/errata/RHSA-2025:18219 · [email protected]https://access.redhat.com/errata/RHSA-2025:20181 · [email protected]https://access.redhat.com/errata/RHSA-2025:21885 · [email protected]https://access.redhat.com/errata/RHSA-2025:22019 · [email protected]https://access.redhat.com/errata/RHSA-2025:9526 · [email protected]https://access.redhat.com/errata/RHSA-2026:0934 · [email protected]https://access.redhat.com/security/cve/CVE-2025-6020 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2372512 · [email protected]https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx · [email protected]http://www.openwall.com/lists/oss-security/2025/06/17/1 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-577017.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 17 JUN 12:44Z
    Linux-pam: linux-pam directory traversal
    cvelistv5