Security Advisory

CVE-2025-6020

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-17 12:44:08
Last updated 2026-05-12 12:02:28
Assigner redhat
State PUBLISHED

Description

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.