pam (SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS package pam, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2025-6018 — CVSS 7.8 (high): A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM)…
• CVE-2025-6020 — CVSS 7.8 (high): A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local…
• CVE-2024-10041 — CVSS 4.7 (medium): A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute…