CVE-2025-8941

A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020.

Score
CVSS 3.1 7.8 High
Status
Deferred - secalert@redhat.com
Published
2025-08-13
Last modified
2026-02-26
Weaknesses
CWE-22

Affected products

References

 
 
© AVABIS GmbH privacypolicy about