7.8
Élevée
CVE-2025-8941 A flaw was found in linux-pam
Description
A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions non publiées | |
| Red Hat Enterprise Linux 8 | Versions non publiées | |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | Versions non publiées | |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | Versions non publiées | |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | Versions non publiées | |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | Versions non publiées |
Afficher les 12 autres branches Masquer les 12 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | Versions non publiées | |
| Red Hat Enterprise Linux 9 | Versions non publiées | |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | Versions non publiées | |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions non publiées | |
| Red Hat Enterprise Linux 9.4 Extended Update Support | Versions non publiées | |
| Red Hat Web Terminal 1.11 on RHEL 9 1.11 | premières → < 1.11-8 | 1.11-8 |
| Red Hat Web Terminal 1.12 on RHEL 9 1.12 | premières → < 1.12-4 | 1.12-4 |
| cert-manager operator for Red Hat OpenShift 1.16 | Versions non publiées | |
| Compliance Operator 1 | Versions non publiées | |
| Red Hat Discovery 2 | Versions non publiées | |
| Red Hat Insights proxy 1.5 | Versions non publiées | |
| Red Hat OpenShift sandboxed containers 1.1 | Versions non publiées |
Références
- RHSA-2025:14557 access.redhat.com
- RHSA-2025:15099 access.redhat.com
- RHSA-2025:15100 access.redhat.com
- RHSA-2025:15101 access.redhat.com
- RHSA-2025:15102 access.redhat.com
- RHSA-2025:15103 access.redhat.com
- RHSA-2025:15104 access.redhat.com
- RHSA-2025:15105 access.redhat.com
- RHSA-2025:15106 access.redhat.com
- RHSA-2025:15107 access.redhat.com
- RHSA-2025:15709 access.redhat.com
- RHSA-2025:15827 access.redhat.com
- RHSA-2025:15828 access.redhat.com
- RHSA-2025:16524 access.redhat.com
- RHSA-2025:17181 access.redhat.com
- RHSA-2025:18219 access.redhat.com
- RHSA-2025:21885 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2388220 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Enterprise Linux 7 Extended Lifecycle Support
Les 373 CVE de Red Hat Enterprise Linux 7 Extended Lifecycle Support →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Moyenne
CVE-2026-102559
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
8.6
Élevée
CVE-2026-102558
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
8.6
Élevée
CVE-2026-102557
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
8.6
Élevée