CVE-2025-1390
MediumSummary
The PAM module pam_cap.so of libcap supports group names starting with “@”, but during parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security issues.
Risk Assessment
The risk involves potential unauthorized granting of capabilities to users, which could lead to privilege escalation.
Recommendation
It is recommended to upgrade libcap to a version that correctly parses group configurations, and review PAM configurations for incorrect entries.
Original NVD description (English source)
The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to secu