High severity7.8NVD Advisory· Published Jun 17, 2025· Updated May 12, 2026
CVE-2025-6020
CVE-2025-6020
Description
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
32- www.openwall.com/lists/oss-security/2025/06/17/1nvd
- access.redhat.com/errata/RHSA-2025:10024nvd
- access.redhat.com/errata/RHSA-2025:10027nvd
- access.redhat.com/errata/RHSA-2025:10180nvd
- access.redhat.com/errata/RHSA-2025:10354nvd
- access.redhat.com/errata/RHSA-2025:10357nvd
- access.redhat.com/errata/RHSA-2025:10358nvd
- access.redhat.com/errata/RHSA-2025:10359nvd
- access.redhat.com/errata/RHSA-2025:10361nvd
- access.redhat.com/errata/RHSA-2025:10362nvd
- access.redhat.com/errata/RHSA-2025:10735nvd
- access.redhat.com/errata/RHSA-2025:10823nvd
- access.redhat.com/errata/RHSA-2025:11386nvd
- access.redhat.com/errata/RHSA-2025:11487nvd
- access.redhat.com/errata/RHSA-2025:14557nvd
- access.redhat.com/errata/RHSA-2025:15099nvd
- access.redhat.com/errata/RHSA-2025:15709nvd
- access.redhat.com/errata/RHSA-2025:15827nvd
- access.redhat.com/errata/RHSA-2025:15828nvd
- access.redhat.com/errata/RHSA-2025:16524nvd
- access.redhat.com/errata/RHSA-2025:17181nvd
- access.redhat.com/errata/RHSA-2025:18219nvd
- access.redhat.com/errata/RHSA-2025:20181nvd
- access.redhat.com/errata/RHSA-2025:21885nvd
- access.redhat.com/errata/RHSA-2025:22019nvd
- access.redhat.com/errata/RHSA-2025:9526nvd
- access.redhat.com/errata/RHSA-2026:0934nvd
- access.redhat.com/security/cve/CVE-2025-6020nvd
- bugzilla.redhat.com/show_bug.cginvd
- cert-portal.siemens.com/productcert/html/ssa-577017.htmlnvd
- github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gxnvd
- lists.debian.org/debian-lts-announce/2025/09/msg00021.htmlnvd
News mentions
1- Siemens Ruggedcom RoxCISA Alerts