Privilege Escalation Vulnerability in linux-pam Affects Red Hat
CVE-2025-8941

7.8HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Vendor
CVE Published:
13 August 2025

What is CVE-2025-8941?

A vulnerability exists in the linux-pam module, particularly within the pam_namespace. This flaw can be exploited by local users through improperly handled user-controlled paths, leading to potential symlink attack opportunities and race condition exploitation. These vulnerabilities can enable unauthorized privilege escalation, allowing attackers to gain root access. This CVE also serves to address and provide a comprehensive fix for the related issue identified in CVE-2025-6020.

References

https://access.redhat.com/security/cve/CVE-2025-8941
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2388220
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-8941 : Privilege Escalation Vulnerability in linux-pam Affects Red Hat