| BDSA-2026-14565 |
|
Medium |
Jun 15, 2026 |
Linux-PAM is vulnerable to information exposure due to an observable timing discrepancy in the `pam_userdb.c` file. A network adjacent attacker could e
more...
Linux-PAM is vulnerable to information exposure due to an observable timing discrepancy in the `pam_userdb.c` file. A network adjacent attacker could exploit this issue could exploit this issue by repeatedly drive authentication through a calling service and observing the response times in order to view the plaintext password of a target account.
**Note:** The vendor has stated that this vulnerability only impacts instances which have `pam_userdb` with `crypt=none`, with an unrecognized crypt method, or without a `crypt= argument`.
less...
|
|
| BDSA-2025-8615 |
|
Medium |
Aug 14, 2025 |
Linux-Pam contains a privilege escalation vulnerability. A local attacker with user-level privileges could exploit this by winning race conditions from
more...
Linux-Pam contains a privilege escalation vulnerability. A local attacker with user-level privileges could exploit this by winning race conditions from an out-of-mount position with namespace access or with a multi-user setup. Successfully achieving this would allow an attacker to elevate their own privileges to root.
**Note**: This issue exists due to an incomplete patch for **CVE-2025-6020** (**BDSA-2025-5395**)
less...
|
|
| BDSA-2025-5395 |
|
Medium |
Jun 19, 2025 |
linux-pam contains a privilege escalation vulnerability. A local attacker with user-level privileges could exploit this by winning race conditions from
more...
linux-pam contains a privilege escalation vulnerability. A local attacker with user-level privileges could exploit this by winning race conditions from an out-of-mount position with namespace access or with a multi-user setup. Successfully achieving this would allow an attacker to elevate their own privileges to root.
**Note**: The vendor had previous tried to fix this issue with [this](https://github.com/linux-pam/linux-pam/commit/475bd60c552b98c7eddb3270b0b4196847c0072e) commit which was deemed insufficient and could be bypassed.
less...
|
|
| BDSA-2024-12378 |
|
Medium |
Aug 28, 2026 |
Linux-PAM is vulnerable to incorrect authentication due to improper handling of the login counter in the `pam_faillock.c` file. This could allow a loca
more...
Linux-PAM is vulnerable to incorrect authentication due to improper handling of the login counter in the `pam_faillock.c` file. This could allow a local attacker to bypass authentication lockout restrictions.
less...
|
|
| BDSA-2024-10798 |
|
Medium |
Aug 08, 2025 |
pam_access is vulnerable to unauthorized access due to incorrect treatment of `access.conf` configuration rules as hostnames. This allows attackers to
more...
pam_access is vulnerable to unauthorized access due to incorrect treatment of `access.conf` configuration rules as hostnames. This allows attackers to trick the system by pretending to be a trusted hostname, affecting systems relying on pam_access for local or remote access control - especially SSH, sudo, or console logins.
less...
|
|
