CVE-2025-6020

Name of the Vulnerable Software and Affected Versions linux-pam (affected versions not specified)

Description A flaw in the pam namespace module of linux-pam allows local users to elevate their privileges to root via multiple symlink attacks and race conditions. This occurs when a user can launch a process outside of the mount namespace created by pam namespace, enabling them to exploit the issue. The estimated number of potentially affected devices worldwide is not available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.