{"id":"CVE-2025-6018","aliases":["EUVD-2025-22455","GHSA-cg9q-xmf9-7r6w","SUSE-RU-2025:20479-1","SUSE-SU-2025:02001-1","SUSE-SU-2025:02002-1","SUSE-SU-2025:02003-1","SUSE-SU-2025:02004-1","SUSE-SU-2025:02005-1","SUSE-SU-2025:02013-1","SUSE-SU-2025:02015-1","SUSE-SU-2025:02026-1","SUSE-SU-2025:02031-1","SUSE-SU-2025:02032-1","SUSE-SU-2025:02080-1","SUSE-SU-2025:02081-1","SUSE-SU-2025:02082-1","SUSE-SU-2025:20496-1","SUSE-SU-2025:20513-1","SUSE-SU-2025:20533-1","openSUSE-SU-2025:15219-1","openSUSE-SU-2025:15257-1"],"status":"published","title":"Pam-config: lpe from unprivileged to allow_active in pam","description":"A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, \"allow_active\" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01102,"percentile":0.6614,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-863"],"published":"2025-06-18T11:21:27Z","modified":"2026-11-04T22:17:39Z","exploits":[{"source":"pocgithub","id":"dreysanox/CVE-2025-6018_Poc","title":"dreysanox/CVE-2025-6018_Poc","date":"2025-07-03","url":"https://github.com/dreysanox/CVE-2025-6018_Poc"},{"source":"pocgithub","id":"iamgithubber/CVE-2025-6018-19-exploit","title":"iamgithubber/CVE-2025-6018-19-exploit","date":"2025-07-03","url":"https://github.com/iamgithubber/CVE-2025-6018-19-exploit"},{"source":"exploitdb","id":"EDB-52386","title":"Linux PAM Environment - Variable Injection Local Privilege Escalation","type":"local","platform":"linux","date":"2025-07-28","url":"https://www.exploit-db.com/exploits/52386"},{"source":"pocgithub","id":"euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019","title":"euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019","date":"2025-11-30","url":"https://github.com/euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019"},{"source":"pocgithub","id":"0rionCollector/Exploit-Chain-CVE-2025-6018-6019","title":"0rionCollector/Exploit-Chain-CVE-2025-6018-6019","date":"2026-02-09","url":"https://github.com/0rionCollector/Exploit-Chain-CVE-2025-6018-6019"},{"source":"pocgithub","id":"AzureADTrent/CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation","title":"AzureADTrent/CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation","date":"2026-02-09","url":"https://github.com/AzureADTrent/CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation"},{"source":"pocgithub","id":"MichaelVenturella/CVE-2025-6018-6019-PoC","title":"MichaelVenturella/CVE-2025-6018-6019-PoC","date":"2026-02-09","url":"https://github.com/MichaelVenturella/CVE-2025-6018-6019-PoC"},{"source":"pocgithub","id":"muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit","title":"muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit","date":"2026-02-09","url":"https://github.com/muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit"},{"source":"pocgithub","id":"Goultarde/CVE-2025-6018_CVE-2025-6019_autopwn","title":"Goultarde/CVE-2025-6018_CVE-2025-6019_autopwn","date":"2026-02-10","url":"https://github.com/Goultarde/CVE-2025-6018_CVE-2025-6019_autopwn"},{"source":"pocgithub","id":"matesz44/CVE-2025-6018-19","title":"matesz44/CVE-2025-6018-19","date":"2026-02-11","url":"https://github.com/matesz44/CVE-2025-6018-19"},{"source":"pocgithub","id":"DesertDemons/CVE-2025-6018-6019","title":"DesertDemons/CVE-2025-6018-6019","date":"2026-02-12","url":"https://github.com/DesertDemons/CVE-2025-6018-6019"},{"source":"pocgithub","id":"localh0ste/CVE-2025-6018-and-CVE-2025-6019","title":"localh0ste/CVE-2025-6018-and-CVE-2025-6019","date":"2026-02-13","url":"https://github.com/localh0ste/CVE-2025-6018-and-CVE-2025-6019"},{"source":"pocgithub","id":"MaxKappa/opensuse-leap-privesc-exploit","title":"MaxKappa/opensuse-leap-privesc-exploit","date":"2026-02-14","url":"https://github.com/MaxKappa/opensuse-leap-privesc-exploit"},{"source":"pocgithub","id":"iOxsec/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit","title":"iOxsec/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit","date":"2026-02-22","url":"https://github.com/iOxsec/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit"},{"source":"pocgithub","id":"e1arth/CVE-2025-6018","title":"e1arth/CVE-2025-6018","date":"2026-03-02","url":"https://github.com/e1arth/CVE-2025-6018"}],"fixes":[{"ecosystem":"SUSE:Linux Micro 6.1","package":"pam_pkcs11","fixed_in":["0.6.12-slfo.1.1_4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"pam","fixed_in":["1.1.8-24.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"pam","fixed_in":["1.1.8-24.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gdm","fixed_in":["3.10.0.1-54.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gdm","fixed_in":["3.10.0.1-54.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"gdm","fixed_in":["45.0.1-150600.6.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"gdm","fixed_in":["45.0.1-150600.6.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"gdm","fixed_in":["41.3-150400.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"gdm","fixed_in":["41.3-150400.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"gdm","fixed_in":["41.3-150400.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"gdm","fixed_in":["41.3-150400.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"gdm","fixed_in":["41.3-150400.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"gdm","fixed_in":["41.3-150400.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"gdm","fixed_in":["41.3-150400.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"gdm","fixed_in":["41.3-150400.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"gdm","fixed_in":["45.0.1-150700.12.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"gdm","fixed_in":["3.34.1-150200.8.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"gdm","fixed_in":["3.34.1-150200.8.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"gdm","fixed_in":["3.34.1-150200.8.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"gdm","fixed_in":["3.34.1-150200.8.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"pam_pkcs11","fixed_in":["0.6.10-150600.16.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"pam_pkcs11","fixed_in":["0.6.10-150600.16.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"pam_pkcs11","fixed_in":["0.6.10-150600.16.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"pam_pkcs11","fixed_in":["0.6.10-150100.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"pam_pkcs11","fixed_in":["0.6.8-7.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"pam_pkcs11","fixed_in":["0.6.8-7.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"pam-config","fixed_in":["1.1-150600.16.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"pam-config","fixed_in":["1.1-150600.16.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"pam-config","fixed_in":["1.1-150600.16.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"pam-config","fixed_in":["0.89-5.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"pam-config","fixed_in":["0.89-5.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"pam-config","fixed_in":["1.1-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"pam_pkcs11","fixed_in":["0.6.12-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"pam-config","fixed_in":["2.11-2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"pam-config","fixed_in":["2.11+git.20240906-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gdm","fixed_in":["48.0-10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"pam_pkcs11","fixed_in":["0.6.13-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.12-slfo.1.1_4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-24.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-24.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0.1-150600.6.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0.1-150600.6.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.3-150400.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.3-150400.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.3-150400.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.3-150400.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.3-150400.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.3-150400.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.3-150400.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.3-150400.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0.1-150700.12.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-150200.8.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-150200.8.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-150200.8.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-150200.8.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150600.16.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150600.16.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150600.16.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.10-150100.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.8-7.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.8-7.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150600.16.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150600.16.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150600.16.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.89-5.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.89-5.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.12-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"pam-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11+git.20240906-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"48.0-10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.13-2.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"suse","product":"pam-config"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-6018","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372693","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1243226","tags":["Exploit","Third Party Advisory"]},{"url":"https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt","tags":["exploit","Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/08/28/4"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6018"},{"url":"https://github.com/advisories/GHSA-cg9q-xmf9-7r6w"},{"url":"https://www.suse.com/support/update/announcement//suse-ru-202520479-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243226","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6018","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502001-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244509","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502002-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502003-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502004-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502005-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502013-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6020","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502015-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502026-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502031-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502032-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502080-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502081-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502082-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520496-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520513-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520533-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-6018","title":"Pam-config: lpe from unprivileged to allow_active in pam","description":"A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, \"allow_active\" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.","status":"published","published":"2025-07-23T14:58:59.75Z","modified":"2026-11-04T21:56:49.082Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-04T22:39:14.734949Z"}],"euvd":[{"id":"EUVD-2025-22455","description":"A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, \"allow_active\" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.","status":"published","published":"2025-07-23T14:58:59Z","modified":"2026-11-04T21:56:49Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T23:47:18.620008Z"}],"ghsa":[{"id":"GHSA-cg9q-xmf9-7r6w","title":"A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux...","description":"A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, \"allow_active\" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.","status":"published","published":"2025-07-23T15:31:14Z","modified":"2025-11-05T00:31:23Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:04:38.82847Z"}],"nvd":[{"id":"CVE-2025-6018","description":"A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, \"allow_active\" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.","status":"published","published":"2025-07-23T15:15:34.81Z","modified":"2026-11-04T22:17:39.153Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-04T23:43:37.864413Z"}],"osv":[{"id":"openSUSE-SU-2025:15219-1","title":"gdm-48.0-10.1 on GA media","description":"These are all security issues fixed in the gdm-48.0-10.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:30.197832Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15257-1","title":"pam_pkcs11-0.6.13-2.1 on GA media","description":"These are all security issues fixed in the pam_pkcs11-0.6.13-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:33.592911Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-RU-2025:20479-1","title":"Recommended update for pam_pkcs11","description":"This update for pam_pkcs11 fixes the following issues:\n\n- Removes pam_env from auth stack for security reason [bsc#1243226]\n","status":"published","published":"2025-07-15T14:48:39Z","modified":"2026-03-23T04:48:24.485724Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2025:02001-1","title":"Security update for pam","description":"This update for pam fixes the following issues:\n\n- CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226).\n- pam_namespace: convert functions that may operate on a user-controlled path to operate on file descriptors instead of absolute path (bsc#1244509).\n","status":"published","published":"2025-06-18T11:21:27Z","modified":"2026-03-23T04:47:40.076251Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02002-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- CVE-2025-6018: pam.d: removes pam_env from auth stack for security reason (bsc#1243226).\n","status":"published","published":"2025-06-18T11:21:39Z","modified":"2026-03-23T04:46:25.012817Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02003-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226). \n","status":"published","published":"2025-06-18T11:21:50Z","modified":"2026-03-23T04:49:33.337229Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02004-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226). \n","status":"published","published":"2025-06-18T11:22:28Z","modified":"2026-03-23T04:47:40.142793Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02005-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).\n","status":"published","published":"2025-06-18T11:22:41Z","modified":"2026-03-23T04:46:25.123183Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02013-1","title":"Security update for pam","description":"This update for pam fixes the following issues:\n\n- CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226).\n- CVE-2025-6020: pam_namespace: convert functions that may operate on a user-controlled path to operate on file descriptors instead of absolute path (bsc#1244509).\n","status":"published","published":"2025-06-18T18:05:26Z","modified":"2026-02-04T03:18:33.066511Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02015-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- CVE-2025-6018: pam.d: removes pam_env from auth stack for security reason (bsc#1243226).\n","status":"published","published":"2025-06-19T07:14:10Z","modified":"2026-02-04T03:49:50.817123Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02026-1","title":"Security update for pam_pkcs11","description":"This update for pam_pkcs11 fixes the following issues:\n\n- CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).\n","status":"published","published":"2025-06-19T13:30:55Z","modified":"2026-02-04T04:39:24.952078Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02031-1","title":"Security update for pam_pkcs11","description":"This update for pam_pkcs11 fixes the following issues:\n\n- CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).\n","status":"published","published":"2025-06-20T07:56:26Z","modified":"2026-02-04T03:31:17.115131Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02032-1","title":"Security update for pam_pkcs11","description":"This update for pam_pkcs11 fixes the following issues:\n\n- CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).\n","status":"published","published":"2025-06-20T07:56:53Z","modified":"2026-02-04T03:54:26.48653Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02080-1","title":"Security update for pam-config","description":"This update for pam-config fixes the following issues:\n\n- CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of the SESSION stack (bsc#1243226).\n","status":"published","published":"2025-06-24T10:26:24Z","modified":"2026-03-23T04:47:40.462072Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02081-1","title":"Security update for pam-config","description":"This update for pam-config fixes the following issues:\n\n- CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of the SESSION stack (bsc#1243226).\n","status":"published","published":"2025-06-24T10:26:44Z","modified":"2026-03-23T04:47:40.481378Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02082-1","title":"Security update for pam-config","description":"This update for pam-config fixes the following issues:\n\n- CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of the SESSION stack (bsc#1243226).\n","status":"published","published":"2025-06-24T10:28:56Z","modified":"2026-03-23T04:47:40.362632Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:20496-1","title":"Security update for pam_pkcs11","description":"This update for pam_pkcs11 fixes the following issues:\n\n- Removes pam_env from auth stack for security reason [bsc#1243226]\n\n","status":"published","published":"2025-07-16T08:23:45Z","modified":"2026-03-23T04:47:15.004055Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20513-1","title":"Security update for pam-config","description":"This update for pam-config fixes the following issues:\n\n- CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the\n  really end of the SESSION stack. (bsc#1243226)\n","status":"published","published":"2025-07-29T14:09:33Z","modified":"2026-03-23T04:48:58.208121Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20533-1","title":"Security update for pam-config","description":"This update for pam-config fixes the following issues:\n\n- CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put\n  this module at the really end of the SESSION stack.  (bsc#1243226)\n","status":"published","published":"2025-07-28T14:34:42Z","modified":"2026-03-23T04:50:10.856241Z","updated_at":"2026-11-02T15:53:59.92114Z"}]}}