Local Privilege Escalation Vulnerability in pam_namespace of Linux-PAM
CVE-2025-6020
7.8HIGH
Key Information:
- Status
- Vendor
- CVE Published:
- 17 June 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-6020?
A flaw exists in the pam_namespace module of Linux-PAM that could allow local users to escalate their privileges to root. By exploiting weak protection of user-controlled paths, attackers can execute privilege escalation through multiple symlink attacks and race conditions, posing a serious risk to system integrity and security. Organizations that utilize affected versions of Linux-PAM must ensure they apply the latest patches to mitigate potential exploitation.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Olivier BAL-PETRE (ANSSI - French Cybersecurity Agency) for reporting this issue.