The vulnerability CVE-2025-6020 affects the linux-pam package in Red Hat Enterprise Linux 10.0 Extended Update Support and related architectures. It is a directory traversal flaw (CWE-22) that could allow an attacker to access files or directories outside the intended scope by manipulating file paths. Red Hat has issued an update (pam-1.6.1-8.el10_0) to fix this issue. The vendor advisory RHSA-2025:22019 provides detailed information and instructions for remediation. No CVSS score is provided, but the severity is indicated as high/Important.

If exploited, this directory traversal vulnerability could allow unauthorized users to access or manipulate files outside of the intended directories, potentially leading to unauthorized information disclosure or system compromise. However, no known exploits have been reported in the wild at this time. The impact is significant enough for Red Hat to rate the update as Important.

Red Hat has released an official security update that addresses this vulnerability. Users of affected Red Hat Enterprise Linux 10.0 Extended Update Support versions should apply the pam package update (pam-1.6.1-8.el10_0) as soon as possible following the instructions in the Red Hat advisory (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated by the vendor advisory.