CVE-2025-1390

Name of the Vulnerable Software and Affected Versions: libcap (affected versions not specified)

Description: The PAM module pam cap.so of libcap configuration incorrectly recognizes configurations not starting with "@" as group names, potentially leading to nonintended users being granted an inherited capability set. This may result in security risks, as attackers can exploit this issue to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.