CVE-2025-6020

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

References

Affected packages

Debian:11 / pam

Package

Name: pam
Purl: pkg:deb/debian/pam?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.4.0-9

1.4.0-9+deb11u1

1.4.0-10

1.4.0-11

1.4.0-12

1.4.0-13

1.5.2-1

1.5.2-2

1.5.2-3

1.5.2-4

1.5.2-5

1.5.2-6

1.5.2-7

1.5.2-8

1.5.2-9

1.5.2-9.1

1.5.3-1

1.5.3-2

1.5.3-3

1.5.3-4

1.5.3-5

1.5.3-6

1.5.3-6+hurd.1

1.5.3-7

1.7.0-1

1.7.0-2

1.7.0-2+hurd.1

1.7.0-3

1.7.0-4

1.7.0-5

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / pam

Package

Name: pam
Purl: pkg:deb/debian/pam?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.5.2-6

1.5.2-6+deb12u1

1.5.2-7

1.5.2-8

1.5.2-9

1.5.2-9.1

1.5.3-1

1.5.3-2

1.5.3-3

1.5.3-4

1.5.3-5

1.5.3-6

1.5.3-6+hurd.1

1.5.3-7

1.7.0-1

1.7.0-2

1.7.0-2+hurd.1

1.7.0-3

1.7.0-4

1.7.0-5

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / pam

Package

Name: pam
Purl: pkg:deb/debian/pam?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.0-5

Affected versions

1.*

1.5.2-6

1.5.2-7

1.5.2-8

1.5.2-9

1.5.2-9.1

1.5.3-1

1.5.3-2

1.5.3-3

1.5.3-4

1.5.3-5

1.5.3-6

1.5.3-6+hurd.1

1.5.3-7

1.7.0-1

1.7.0-2

1.7.0-2+hurd.1

1.7.0-3

1.7.0-4

Ecosystem specific

{
    "urgency": "not yet assigned"
}