CVE-2025-6020

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-6020
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-6020.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-6020
Aliases
Downstream
Related
Published
2025-06-17T13:15:21Z
Modified
2026-01-14T18:57:13.038223Z
Summary
[none]
Details

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

References

Affected packages