CVE-2025-8941
Fixed in a distro release EPSS <1%CVSS 7.8
A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020.
Products: Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Web Terminal 1.11 on RHEL 9, Red Hat Web Terminal 1.12 on RHEL 9, cert-manager operator for Red Hat OpenShift 1.16, Red Hat Compliance Operator 1, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat OpenShift sandboxed containers 1.1
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | pam | 1.5.1-26.el9_6 |
| AlmaLinux 9 | pam-devel | 1.5.1-26.el9_6 |
| AlmaLinux 9 | pam-docs | 1.5.1-26.el9_6 |
| Amazon Linux 2 | pam | 1.1.8-23.amzn2.0.5 |
| Amazon Linux 2 | pam-devel | 1.1.8-23.amzn2.0.5 |
| Amazon Linux 2023 | pam | 1.5.1-8.amzn2023.0.7 |
| Amazon Linux 2023 | pam-devel | 1.5.1-8.amzn2023.0.7 |
| Amazon Linux 2023 | pam-docs | 1.5.1-8.amzn2023.0.7 |
| Debian 12 | pam | no fix |
| Debian 13 | pam | no fix |
| Debian 14 | pam | no fix |
| Red Hat Enterprise Linux 8 | pam | 0:1.3.1-38.el8_10 |
| Red Hat Enterprise Linux 8 | pam-debuginfo | 0:1.3.1-38.el8_10 |
| Red Hat Enterprise Linux 8 | pam-debugsource | 0:1.3.1-38.el8_10 |
| Red Hat Enterprise Linux 8 | pam-devel | 0:1.3.1-38.el8_10 |
| Red Hat Enterprise Linux 9 | pam | 0:1.5.1-26.el9_6 |
| Red Hat Enterprise Linux 9 | pam-debuginfo | 0:1.5.1-26.el9_6 |
| Red Hat Enterprise Linux 9 | pam-debugsource | 0:1.5.1-26.el9_6 |
| Red Hat Enterprise Linux 9 | pam-devel | 0:1.5.1-26.el9_6 |
| Red Hat Enterprise Linux 9 | pam-docs | 0:1.5.1-26.el9_6 |
| Red Hat rhel aus 8.2 | pam | 0:1.3.1-8.el8_2.2 |
| Red Hat rhel aus 8.2 | pam-debuginfo | 0:1.3.1-8.el8_2.2 |
| Red Hat rhel aus 8.2 | pam-debugsource | 0:1.3.1-8.el8_2.2 |
| Red Hat rhel aus 8.2 | pam-devel | 0:1.3.1-8.el8_2.2 |
| Red Hat rhel aus 8.4 | pam | 0:1.3.1-14.el8_4.2 |
| Red Hat rhel aus 8.4 | pam-debuginfo | 0:1.3.1-14.el8_4.2 |
| Red Hat rhel aus 8.4 | pam-debugsource | 0:1.3.1-14.el8_4.2 |
| Red Hat rhel aus 8.4 | pam-devel | 0:1.3.1-14.el8_4.2 |
| Red Hat rhel aus 8.6 | pam | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel aus 8.6 | pam-debuginfo | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel aus 8.6 | pam-debugsource | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel aus 8.6 | pam-devel | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel e4s 8.6 | pam | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel e4s 8.6 | pam-debuginfo | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel e4s 8.6 | pam-debugsource | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel e4s 8.6 | pam-devel | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel e4s 8.8 | pam | 0:1.3.1-26.el8_8.2 |
| Red Hat rhel e4s 8.8 | pam-debuginfo | 0:1.3.1-26.el8_8.2 |
| Red Hat rhel e4s 8.8 | pam-debugsource | 0:1.3.1-26.el8_8.2 |
| Red Hat rhel e4s 8.8 | pam-devel | 0:1.3.1-26.el8_8.2 |
| Red Hat rhel e4s 9.0 | pam | 0:1.5.1-9.el9_0.3 |
| Red Hat rhel e4s 9.0 | pam-debuginfo | 0:1.5.1-9.el9_0.3 |
| Red Hat rhel e4s 9.0 | pam-debugsource | 0:1.5.1-9.el9_0.3 |
| Red Hat rhel e4s 9.0 | pam-devel | 0:1.5.1-9.el9_0.3 |
| Red Hat rhel e4s 9.0 | pam-docs | 0:1.5.1-9.el9_0.3 |
| Red Hat rhel e4s 9.2 | pam | 0:1.5.1-15.el9_2.2 |
| Red Hat rhel e4s 9.2 | pam-debuginfo | 0:1.5.1-15.el9_2.2 |
| Red Hat rhel e4s 9.2 | pam-debugsource | 0:1.5.1-15.el9_2.2 |
| Red Hat rhel e4s 9.2 | pam-devel | 0:1.5.1-15.el9_2.2 |
| Red Hat rhel e4s 9.2 | pam-docs | 0:1.5.1-15.el9_2.2 |
| Red Hat rhel els 7 | pam | 0:1.1.8-23.el7_9.2 |
| Red Hat rhel els 7 | pam-debuginfo | 0:1.1.8-23.el7_9.2 |
| Red Hat rhel els 7 | pam-devel | 0:1.1.8-23.el7_9.2 |
| Red Hat rhel eus 9.4 | pam | 0:1.5.1-24.el9_4.1 |
| Red Hat rhel eus 9.4 | pam-debuginfo | 0:1.5.1-24.el9_4.1 |
| Red Hat rhel eus 9.4 | pam-debugsource | 0:1.5.1-24.el9_4.1 |
| Red Hat rhel eus 9.4 | pam-devel | 0:1.5.1-24.el9_4.1 |
| Red Hat rhel eus 9.4 | pam-docs | 0:1.5.1-24.el9_4.1 |
| Red Hat rhel eus long life 8.4 | pam | 0:1.3.1-14.el8_4.2 |
| Red Hat rhel eus long life 8.4 | pam-debuginfo | 0:1.3.1-14.el8_4.2 |
| Red Hat rhel eus long life 8.4 | pam-debugsource | 0:1.3.1-14.el8_4.2 |
| Red Hat rhel eus long life 8.4 | pam-devel | 0:1.3.1-14.el8_4.2 |
| Red Hat rhel tus 8.6 | pam | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel tus 8.6 | pam-debuginfo | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel tus 8.6 | pam-debugsource | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel tus 8.6 | pam-devel | 0:1.3.1-16.el8_6.3 |
| Red Hat rhel tus 8.8 | pam | 0:1.3.1-26.el8_8.2 |
| Red Hat rhel tus 8.8 | pam-debuginfo | 0:1.3.1-26.el8_8.2 |
| Red Hat rhel tus 8.8 | pam-debugsource | 0:1.3.1-26.el8_8.2 |
| Red Hat rhel tus 8.8 | pam-devel | 0:1.3.1-26.el8_8.2 |
| Rocky Linux 8 | pam | 0:1.3.1-38.el8_10 |
| Rocky Linux 9 | pam | 0:1.5.1-26.el9_6 |