7.8
High
CVE-2025-8941 A flaw was found in linux-pam
Description
A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | Versions not published | |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | Versions not published | |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | Versions not published |
Show the 12 other branches Hide the 12 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.4 Extended Update Support | Versions not published | |
| Red Hat Web Terminal 1.11 on RHEL 9 1.11 | earliest → < 1.11-8 | 1.11-8 |
| Red Hat Web Terminal 1.12 on RHEL 9 1.12 | earliest → < 1.12-4 | 1.12-4 |
| cert-manager operator for Red Hat OpenShift 1.16 | Versions not published | |
| Compliance Operator 1 | Versions not published | |
| Red Hat Discovery 2 | Versions not published | |
| Red Hat Insights proxy 1.5 | Versions not published | |
| Red Hat OpenShift sandboxed containers 1.1 | Versions not published |
References
- RHSA-2025:14557 access.redhat.com
- RHSA-2025:15099 access.redhat.com
- RHSA-2025:15100 access.redhat.com
- RHSA-2025:15101 access.redhat.com
- RHSA-2025:15102 access.redhat.com
- RHSA-2025:15103 access.redhat.com
- RHSA-2025:15104 access.redhat.com
- RHSA-2025:15105 access.redhat.com
- RHSA-2025:15106 access.redhat.com
- RHSA-2025:15107 access.redhat.com
- RHSA-2025:15709 access.redhat.com
- RHSA-2025:15827 access.redhat.com
- RHSA-2025:15828 access.redhat.com
- RHSA-2025:16524 access.redhat.com
- RHSA-2025:17181 access.redhat.com
- RHSA-2025:18219 access.redhat.com
- RHSA-2025:21885 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2388220 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux 7 Extended Lifecycle Support
The 373 CVEs of Red Hat Enterprise Linux 7 Extended Lifecycle Support →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Medium
CVE-2026-102559
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
8.6
High
CVE-2026-102558
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
8.6
High
CVE-2026-102557
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
8.6
High