The vulnerability CVE-2025-6020 exists in the linux-pam module pam_namespace, where it improperly limits pathnames to restricted directories. This allows local users to exploit multiple symlink attacks and race conditions to elevate privileges to root. The issue affects linux-pam versions including 0, 8.0.0 through 8.10, and 9.4.0 up to but not including 9.4.1. Red Hat has released security advisories RHSA-2025:10024 and RHSA-2025:10027 providing patches for Red Hat Enterprise Linux 8 and 9.4 Extended Update Support versions. The CVSS v3.1 score is 7.8 (High), indicating significant confidentiality, integrity, and availability impacts if exploited.

Successful exploitation allows a local user to gain root privileges by leveraging symlink attacks and race conditions in the pam_namespace module of linux-pam. This compromises system security by enabling unauthorized privilege escalation, potentially leading to full system compromise.

Red Hat has issued official security advisories with patches addressing CVE-2025-6020 for Red Hat Enterprise Linux 8 and 9.4 Extended Update Support versions. Users should apply the updates as described in Red Hat advisories RHSA-2025:10024 and RHSA-2025:10027. Refer to https://access.redhat.com/articles/11258 for detailed update instructions. Applying these updates mitigates the vulnerability. No additional mitigation steps are required beyond applying the official patches.