High DLA-4306-1 2 CVEs

pam - security update

Published Sep 21, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	pam	1.4.0-9+deb11u2

Vulnerabilities 2

High 7.8

CVE-2025-6020 Public exploit

Linux-pam: linux-pam directory traversal

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux

Jun 17, 2025
Medium 5.5

CVE-2024-22365

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo…

pam pam pam linux-pam Debian Ubuntu Azure Linux Alpine

Feb 6, 2024