CVE-2025-6020

EUVD-2025-19056
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensRUGGEDCOM ROX MX5000
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX MX5000RE
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX RX1400
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX RX1500
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX RX1501
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX RX1510
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX RX1511
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX RX1512
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX RX1524
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX RX1536
𝑥
< V2.17.1
ADP
SiemensRUGGEDCOM ROX RX5000
𝑥
< V2.17.1
ADP
Debian logo
Debian Releases
Debian Product
Codename
pam
bookworm
1.5.2-6+deb12u2
fixed
bullseye
vulnerable
bullseye (security)
1.4.0-9+deb11u2
fixed
forky
1.7.0-5
fixed
sid
1.7.0-5
fixed
trixie
1.7.0-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pam
bionic
needs-triage
focal
needs-triage
jammy
Fixed 1.4.0-11ubuntu2.6
released
noble
Fixed 1.5.3-5ubuntu5.4
released
oracular
Fixed 1.5.3-7ubuntu2.3
released
plucky
Fixed 1.5.3-7ubuntu4.3
released
questing
Fixed 1.5.3-7ubuntu6
released
resolute
Fixed 1.5.3-7ubuntu6
released
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
pam
suse enterprise desktop 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise desktop 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP2
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.83.1
fixed
pam-32bit
suse enterprise desktop 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise desktop 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP2
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.83.1
fixed
pam-devel
suse enterprise desktop 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise desktop 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP2
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.83.1
fixed
pam-devel-32bit
suse enterprise sap 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP2
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP5
1.3.0-150000.6.83.1
fixed
pam-doc
suse enterprise desktop 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise desktop 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP2
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.83.1
fixed
pam-extra
suse enterprise desktop 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise desktop 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP2
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.83.1
fixed
pam-extra-32bit
suse enterprise desktop 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise desktop 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise sap 15 SP7
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP2
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP3
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP4
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP5
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP6
1.3.0-150000.6.83.1
fixed
suse enterprise server 15 SP7
1.3.0-150000.6.83.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
pam
RHEL 8
0:1.3.1-38.el8_10
fixed
RHEL 8.2 AUS
0:1.3.1-8.el8_2.1
fixed
RHEL 8.4 AUS
0:1.3.1-14.el8_4.1
fixed
RHEL 8.6 AUS
0:1.3.1-16.el8_6.2
fixed
RHEL 8.6 E4S
0:1.3.1-16.el8_6.2
fixed
RHEL 8.6 TUS
0:1.3.1-16.el8_6.2
fixed
RHEL 8.8 E4S
0:1.3.1-26.el8_8.1
fixed
RHEL 8.8 TUS
0:1.3.1-26.el8_8.1
fixed
RHEL 9
0:1.5.1-25.el9_6
fixed
pam-devel
RHEL 8
0:1.3.1-38.el8_10
fixed
RHEL 8.2 AUS
0:1.3.1-8.el8_2.1
fixed
RHEL 8.4 AUS
0:1.3.1-14.el8_4.1
fixed
RHEL 8.6 AUS
0:1.3.1-16.el8_6.2
fixed
RHEL 8.6 E4S
0:1.3.1-16.el8_6.2
fixed
RHEL 8.6 TUS
0:1.3.1-16.el8_6.2
fixed
RHEL 8.8 E4S
0:1.3.1-26.el8_8.1
fixed
RHEL 8.8 TUS
0:1.3.1-26.el8_8.1
fixed
RHEL 9
0:1.5.1-25.el9_6
fixed
pam-docs
RHEL 9
0:1.5.1-25.el9_6
fixed
References