CVE-2024-22365Medium· 5.5▾ Sunlitlinux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.5%
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
linux-pam < 1.6.0Upgrade past the affected range:
linux-pam 1.6.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-6020High· 7.8A flaw was found in linux-pam
CVE-2022-28321Critical· 9.8The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins
CVE-2024-10041Medium· 4.7A vulnerability was found in PAM
CVE-2026-57187High· 7.1Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing
CVE-2026-76300High· 8.8Security Hardening in Splunk Enterprise - October 2026
CVE-2026-76408NoneImproper Control of a Resource Through its Lifetime in Splunk SOAR