CVE-2025-8941 – this is the “complete” fix for CVE-2025-6020, a directory-traversal privilege escalation in Linux-PAM’s pam_namespace module. The upstream patch fully addresses the symlink and race-condition attack vectors that were previously mitigated only partially.
Hi The description is not fully clear about that: Is this CVE for a Red Hat specific incomplte fix? The description above say "The upstream patch fully addresses the symlink and race-condition attack vectors that were previously mitigated only partially." so this sound that upstream was fine at every point in time with the patches and the CVE is specific for a Red Hat update for CVE-2025-6020? Can you please clarify? Regards, Salvatore
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Via RHSA-2025:15100 https://access.redhat.com/errata/RHSA-2025:15100
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2025:15099 https://access.redhat.com/errata/RHSA-2025:15099
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Via RHSA-2025:15107 https://access.redhat.com/errata/RHSA-2025:15107
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2025:15101 https://access.redhat.com/errata/RHSA-2025:15101
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Extended Update Support Via RHSA-2025:15102 https://access.redhat.com/errata/RHSA-2025:15102
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Via RHSA-2025:15104 https://access.redhat.com/errata/RHSA-2025:15104
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2025:15103 https://access.redhat.com/errata/RHSA-2025:15103
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat Enterprise Linux 8.6 Telecommunications Update Service Via RHSA-2025:15105 https://access.redhat.com/errata/RHSA-2025:15105
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Extended Lifecycle Support Via RHSA-2025:15106 https://access.redhat.com/errata/RHSA-2025:15106
This issue has been addressed in the following products: Red Hat Web Terminal 1.12 on RHEL 9 Via RHSA-2025:15827 https://access.redhat.com/errata/RHSA-2025:15827
This issue has been addressed in the following products: Red Hat Web Terminal 1.11 on RHEL 9 Via RHSA-2025:15828 https://access.redhat.com/errata/RHSA-2025:15828