pam-docs (AlmaLinux:9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:9 package pam-docs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2025-6020 — CVSS 7.8 (high): A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local…
• CVE-2025-8941 — CVSS 7.8 (high): A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit…
• CVE-2024-10963 — CVSS 7.4 (high): A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability…
• CVE-2024-22365 — CVSS 5.5 (medium): linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat…
• CVE-2024-10041 — CVSS 4.7 (medium): A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute…