CVE-2025-8941 — Linux-pam: incomplete fix for cve-2025-6020
A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to eleva…
Published: 2025-08-13 · CVSS: 7.8 · CVSS 3.1
A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7