CVE-2024-22365

Name of the Vulnerable Software and Affected Versions linux-pam versions prior to 1.6.0

Description The issue is related to the protect dir function in the pam namespace module of Linux-PAM, which is associated with incorrect resource cleanup or release. This can allow a remote attacker to cause a denial of service, resulting in a blocked login process. The problem arises because the openat call for protect dir lacks the O DIRECTORY flag, making it possible for attackers to exploit this via mkfifo.

Recommendations For versions prior to 1.6.0, update to version 1.6.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the pam namespace module until a patch is available. Avoid using the protect dir function in the pam namespace module until the issue is resolved.