# CVE-2025-6020: Linux-pam: linux-pam directory traversal

CVE-2025-6020 is fixed in 11 products on 1 platform, first by RHSA-2025:22019, released June 17, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-6020
- Priority: High
- CVSS: 7.8 (Important)
- EPSS: 0.0047
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 17, 2025
- Weakness: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-6020

## Description

A flaw was found in linux-pam. The module pam_namespace may use accessuser-controlled paths without proper protection, allowing local users toelevate their privileges to root via multiple symlink attacks and raceconditions.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libpam-cracklib Ubuntu 22.04.1 LTS (jammy) | 1.4.0-11ubuntu2.6 | [libpam-cracklib 1.4.0-11ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpam-cracklib-1.4.0-11ubuntu2.6.md) | Jun 17, 2025 |
| Linux | libpam-modules Ubuntu 22.04.1 LTS (jammy) | 1.4.0-11ubuntu2.6 | [libpam-modules 1.4.0-11ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpam-modules-1.4.0-11ubuntu2.6.md) | Jun 17, 2025 |
| Linux | libpam-modules Ubuntu 24.04.5 LTS (noble) | 1.5.3-5ubuntu5.4 | [libpam-modules 1.5.3-5ubuntu5.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpam-modules-1.5.3-5ubuntu5.4.md) | Jun 17, 2025 |
| Linux | libpam-modules Ubuntu 24.10 (oracular) | 1.5.3-7ubuntu2.3 | [libpam-modules 1.5.3-7ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libpam-modules-1.5.3-7ubuntu2.3.md) | Jan 16, 2026 |
| Linux | libpam-modules Ubuntu 25.04 (plucky) | 1.5.3-7ubuntu4.3 | [libpam-modules 1.5.3-7ubuntu4.3](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libpam-modules-1.5.3-7ubuntu4.3.md) | Jan 16, 2026 |
| Linux | libpam-modules Ubuntu 25.10 (questing) | 1.5.3-7ubuntu6 | [libpam-modules 1.5.3-7ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libpam-modules-1.5.3-7ubuntu6.md) | Jun 17, 2025 |
| Linux | libpam-modules-bin Ubuntu 22.04.1 LTS (jammy) | 1.4.0-11ubuntu2.6 | [libpam-modules-bin 1.4.0-11ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpam-modules-bin-1.4.0-11ubuntu2.6.md) | Jun 17, 2025 |
| Linux | libpam-modules-bin Ubuntu 24.04.5 LTS (noble) | 1.5.3-5ubuntu5.4 | [libpam-modules-bin 1.5.3-5ubuntu5.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpam-modules-bin-1.5.3-5ubuntu5.4.md) | Jun 17, 2025 |
| Linux | libpam-modules-bin Ubuntu 24.10 (oracular) | 1.5.3-7ubuntu2.3 | [libpam-modules-bin 1.5.3-7ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libpam-modules-bin-1.5.3-7ubuntu2.3.md) | Jan 16, 2026 |
| Linux | libpam-modules-bin Ubuntu 25.04 (plucky) | 1.5.3-7ubuntu4.3 | [libpam-modules-bin 1.5.3-7ubuntu4.3](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libpam-modules-bin-1.5.3-7ubuntu4.3.md) | Jan 16, 2026 |
| Linux | libpam-modules-bin Ubuntu 25.10 (questing) | 1.5.3-7ubuntu6 | [libpam-modules-bin 1.5.3-7ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libpam-modules-bin-1.5.3-7ubuntu6.md) | Jun 17, 2025 |
| Linux | libpam-runtime Ubuntu 22.04.1 LTS (jammy) | 1.4.0-11ubuntu2.6 | [libpam-runtime 1.4.0-11ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpam-runtime-1.4.0-11ubuntu2.6.md) | Jun 17, 2025 |
| Linux | libpam-runtime Ubuntu 24.04.5 LTS (noble) | 1.5.3-5ubuntu5.4 | [libpam-runtime 1.5.3-5ubuntu5.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpam-runtime-1.5.3-5ubuntu5.4.md) | Jun 17, 2025 |
| Linux | libpam-runtime Ubuntu 24.10 (oracular) | 1.5.3-7ubuntu2.3 | [libpam-runtime 1.5.3-7ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libpam-runtime-1.5.3-7ubuntu2.3.md) | Jan 16, 2026 |
| Linux | libpam-runtime Ubuntu 25.04 (plucky) | 1.5.3-7ubuntu4.3 | [libpam-runtime 1.5.3-7ubuntu4.3](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libpam-runtime-1.5.3-7ubuntu4.3.md) | Jan 16, 2026 |
| Linux | libpam-runtime Ubuntu 25.10 (questing) | 1.5.3-7ubuntu6 | [libpam-runtime 1.5.3-7ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libpam-runtime-1.5.3-7ubuntu6.md) | Jun 17, 2025 |
| Linux | libpam0g Ubuntu 22.04.1 LTS (jammy) | 1.4.0-11ubuntu2.6 | [libpam0g 1.4.0-11ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpam0g-1.4.0-11ubuntu2.6.md) | Jun 17, 2025 |
| Linux | libpam0g Ubuntu 24.04.5 LTS (noble) | 1.5.3-5ubuntu5.4 | [libpam0g 1.5.3-5ubuntu5.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpam0g-1.5.3-5ubuntu5.4.md) | Jun 17, 2025 |
| Linux | libpam0g Ubuntu 24.10 (oracular) | 1.5.3-7ubuntu2.3 | [libpam0g 1.5.3-7ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libpam0g-1.5.3-7ubuntu2.3.md) | Jan 16, 2026 |
| Linux | libpam0g Ubuntu 25.04 (plucky) | 1.5.3-7ubuntu4.3 | [libpam0g 1.5.3-7ubuntu4.3](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libpam0g-1.5.3-7ubuntu4.3.md) | Jan 16, 2026 |
| Linux | libpam0g Ubuntu 25.10 (questing) | 1.5.3-7ubuntu6 | [libpam0g 1.5.3-7ubuntu6](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libpam0g-1.5.3-7ubuntu6.md) | Jun 17, 2025 |
| Linux | pam Debian 12.15 (bookworm) | 1.5.2-6+deb12u2 | [DEBIAN-CVE-2025-6020](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6020.md) | Jun 17, 2025 |
| Linux | pam Debian 13.5 (trixie) | 1.7.0-5 | [DEBIAN-CVE-2025-6020](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6020.md) | Jun 17, 2025 |
| Linux | pam Debian 14 | 1.7.0-5 | [DEBIAN-CVE-2025-6020](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6020.md) | Jun 17, 2025 |
| Linux | pam RHEL 10 | 1.6.1-8.el10_0 | [RHSA-2025:22019](https://patchblox.com/security/data/fix/linux/rhsa-2025-22019.md) | Jun 17, 2025 |
| Linux | pam RHEL 8 | 0:1.3.1-38.el8_10 | [RHSA-2025:14557](https://patchblox.com/security/data/fix/linux/rhsa-2025-14557.md) | Aug 26, 2025 |
| Linux | pam RHEL 9 | 0:1.5.1-25.el9_6 | [RHSA-2025:9526](https://patchblox.com/security/data/fix/linux/rhsa-2025-9526.md) | Jun 24, 2025 |
| Linux | pam almalinux 10 | 1.6.1-8.el10 | [ALSA-2025:20181](https://patchblox.com/security/data/fix/linux/alsa-2025-20181.md) | Nov 11, 2025 |
| Linux | pam almalinux 8 | 1.3.1-38.el8_10 | [ALSA-2025:14557](https://patchblox.com/security/data/fix/linux/alsa-2025-14557.md) | Aug 26, 2025 |
| Linux | pam almalinux 9 | 1.5.1-26.el9_6 | [ALSA-2025:15099](https://patchblox.com/security/data/fix/linux/alsa-2025-15099.md) | Sep 3, 2025 |
| Linux | pam amzn 2023 | 1.5.1-8.amzn2023.0.6 | [ALAS2023-2025-1121](https://patchblox.com/security/data/fix/linux/alas2023-2025-1121.md) | Jul 29, 2025 |
| Linux | pam ol 10 | 0:1.6.1-8.el10 | [ELSA-2025-20181-0](https://patchblox.com/security/data/fix/linux/elsa-2025-20181-0.md) | Nov 25, 2025 |
| Linux | pam ol 8 | 0:1.3.1-37.0.1.el8_10 | [ELSA-2025-10027](https://patchblox.com/security/data/fix/linux/elsa-2025-10027.md) | Jul 1, 2025 |
| Linux | pam ol 9 | 0:1.5.1-25.0.1.el9_6 | [ELSA-2025-9526](https://patchblox.com/security/data/fix/linux/elsa-2025-9526.md) | Jun 24, 2025 |
| Linux | pam opensuse-leap 15.6 | 1.3.0-150000.6.83.1 | [SUSE-SU-2025:02013-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02013-1.md) | Jun 18, 2025 |
| Linux | pam rocky 10 | 0:1.6.1-8.el10 | [RLSA-2025:20181](https://patchblox.com/security/data/fix/linux/rlsa-2025-20181.md) | Jan 14, 2026 |
| Linux | pam rocky 8 | 0:1.3.1-38.el8_10 | [RLSA-2025:14557](https://patchblox.com/security/data/fix/linux/rlsa-2025-14557.md) | Sep 8, 2025 |
| Linux | pam rocky 9 | 0:1.5.1-26.el9_6 | [RLSA-2025:15099](https://patchblox.com/security/data/fix/linux/rlsa-2025-15099.md) | Oct 10, 2025 |
| Linux | pam sles 15.6 | 1.3.0-150000.6.83.1 | [SUSE-SU-2025:02013-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02013-1.md) | Jun 18, 2025 |
| Linux | pam sles 15.7 | 1.3.0-150000.6.83.1 | [SUSE-SU-2025:02013-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02013-1.md) | Jun 18, 2025 |
| Linux | pam-debuginfo amzn 2023 | 1.5.1-8.amzn2023.0.6 | [ALAS2023-2025-1121](https://patchblox.com/security/data/fix/linux/alas2023-2025-1121.md) | Jul 29, 2025 |
| Linux | pam-debugsource amzn 2023 | 1.5.1-8.amzn2023.0.6 | [ALAS2023-2025-1121](https://patchblox.com/security/data/fix/linux/alas2023-2025-1121.md) | Jul 29, 2025 |
| Linux | pam-devel RHEL 8 | 0:1.3.1-38.el8_10 | [RHSA-2025:14557](https://patchblox.com/security/data/fix/linux/rhsa-2025-14557.md) | Aug 26, 2025 |
| Linux | pam-devel RHEL 9 | 0:1.5.1-25.el9_6 | [RHSA-2025:9526](https://patchblox.com/security/data/fix/linux/rhsa-2025-9526.md) | Jun 24, 2025 |
| Linux | pam-devel almalinux 10 | 1.6.1-8.el10 | [ALSA-2025:20181](https://patchblox.com/security/data/fix/linux/alsa-2025-20181.md) | Nov 11, 2025 |
| Linux | pam-devel almalinux 8 | 1.3.1-38.el8_10 | [ALSA-2025:14557](https://patchblox.com/security/data/fix/linux/alsa-2025-14557.md) | Aug 26, 2025 |
| Linux | pam-devel almalinux 9 | 1.5.1-26.el9_6 | [ALSA-2025:15099](https://patchblox.com/security/data/fix/linux/alsa-2025-15099.md) | Sep 3, 2025 |
| Linux | pam-devel amzn 2023 | 1.5.1-8.amzn2023.0.6 | [ALAS2023-2025-1121](https://patchblox.com/security/data/fix/linux/alas2023-2025-1121.md) | Jul 29, 2025 |
| Linux | pam-devel ol 10 | 0:1.6.1-8.el10 | [ELSA-2025-20181-0](https://patchblox.com/security/data/fix/linux/elsa-2025-20181-0.md) | Nov 25, 2025 |
| Linux | pam-devel ol 8 | 0:1.3.1-37.0.1.el8_10 | [ELSA-2025-10027](https://patchblox.com/security/data/fix/linux/elsa-2025-10027.md) | Jul 1, 2025 |
| Linux | pam-devel ol 9 | 0:1.5.1-25.0.1.el9_6 | [ELSA-2025-9526](https://patchblox.com/security/data/fix/linux/elsa-2025-9526.md) | Jun 24, 2025 |
| Linux | pam-docs RHEL 9 | 0:1.5.1-25.el9_6 | [RHSA-2025:9526](https://patchblox.com/security/data/fix/linux/rhsa-2025-9526.md) | Jun 24, 2025 |
| Linux | pam-docs almalinux 9 | 1.5.1-26.el9_6 | [ALSA-2025:15099](https://patchblox.com/security/data/fix/linux/alsa-2025-15099.md) | Sep 3, 2025 |
| Linux | pam-docs amzn 2023 | 1.5.1-8.amzn2023.0.6 | [ALAS2023-2025-1121](https://patchblox.com/security/data/fix/linux/alas2023-2025-1121.md) | Jul 29, 2025 |
| Linux | pam-docs ol 9 | 0:1.5.1-25.0.1.el9_6 | [ELSA-2025-9526](https://patchblox.com/security/data/fix/linux/elsa-2025-9526.md) | Jun 24, 2025 |
| Linux | pam-libs almalinux 10 | 1.6.1-8.el10 | [ALSA-2025:20181](https://patchblox.com/security/data/fix/linux/alsa-2025-20181.md) | Nov 11, 2025 |
| Linux | pam-libs ol 10 | 0:1.6.1-8.el10 | [ELSA-2025-20181-0](https://patchblox.com/security/data/fix/linux/elsa-2025-20181-0.md) | Nov 25, 2025 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.