CVE-2025-6020

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7.8EPSS <1%

Published 2025-06-17Updated 2025-06-17

Media 1380

Vulnerability details

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNAredhat

EPSS score history

Sources

5 links

PoC links are not available for guest users. Login to view them.

CVEShield The Hacker News The Hacker News CVE Organization RedHat Vuln DB

Profile

CVSS

7.8

EPSS

<1%

Published

2025-06-17

Updated

2025-06-17

CNA

redhat

Vendors

Red Hat

3 products

CPEs

cpe:/o:redhat:enterprise_linux:10.1

cpe:/o:redhat:enterprise_linux_eus:10.0

cpe:/o:redhat:rhel_els:7

cpe:/o:redhat:enterprise_linux:8::baseos

cpe:/o:redhat:rhel_aus:8.2::baseos

cpe:/o:redhat:rhel_aus:8.4::baseos

cpe:/o:redhat:rhel_e4s:8.6::baseos

cpe:/o:redhat:rhel_tus:8.6::baseos

cpe:/o:redhat:rhel_aus:8.6::baseos

cpe:/o:redhat:rhel_e4s:8.8::baseos

cpe:/o:redhat:rhel_tus:8.8::baseos

cpe:/o:redhat:enterprise_linux:9::baseos

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/o:redhat:rhel_e4s:9.0::baseos

cpe:/a:redhat:rhel_e4s:9.0::appstream

cpe:/o:redhat:rhel_e4s:9.2::baseos

cpe:/a:redhat:rhel_e4s:9.2::appstream

cpe:/a:redhat:rhel_eus:9.4::appstream

cpe:/o:redhat:rhel_eus:9.4::baseos

cpe:/a:redhat:webterminal:1.11::el9

cpe:/a:redhat:webterminal:1.12::el9

cpe:/a:redhat:rhosemc:1.0::el8

cpe:/a:redhat:openshift_serverless:1.36::el8

cpe:/a:redhat:cert_manager:1.16::el9

cpe:/a:redhat:openshift_compliance_operator:1::el9

cpe:/a:redhat:discovery:2::el9

cpe:/a:redhat:insights_proxy:1.5::el9

cpe:/a:redhat:openshift_distributed_tracing:3.6::el8

cpe:/a:redhat:confidential_compute_attestation:1.10::el9

cpe:/o:redhat:rhivos:1

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated