Wind River Support Network

HomeDefectsLIN1022-6309

Fixed

LIN1022-6309 : Security Advisory - libpam - CVE-2024-22365

Created: Jan 17, 2024 Updated: Oct 11, 2024

Resolved Date: Oct 8, 2024

Found In Version: 10.22.33.1

Fix Version: 10.22.33.19

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

https://nvd.nist.gov/vuln/detail/CVE-2024-22365

CVEs

CVE-2024-22365