CVE-2025-1390 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-1390 Interim 1 3 2026-03-05T01:34:46Z current 2025-02-20T00:12:39Z 2026-03-05T01:34:46Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-1390 The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.6 libcap libcap-devel libcap-progs libcap2 libcap2-32bit libcap2-64bit libpsx2 libpsx2-32bit libcap as a component of SLES-LTSS-TERADATA 15 SP2 libcap-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcap-progs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcap2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcap2-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcap as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcap-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libcap-progs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libcap2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libcap2-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libpsx2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libcap as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libcap-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libcap-progs as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libcap2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libcap2-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libpsx2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libcap as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libcap-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libcap-progs as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libcap2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libcap2-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libpsx2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libcap as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libcap2 as a component of SUSE Linux Enterprise Micro 5.1 libcap as a component of SUSE Linux Enterprise Micro 5.1 libcap2 as a component of SUSE Linux Enterprise Micro 5.2 libcap as a component of SUSE Linux Enterprise Micro 5.2 libcap2 as a component of SUSE Linux Enterprise Micro 5.3 libcap as a component of SUSE Linux Enterprise Micro 5.3 libcap2 as a component of SUSE Linux Enterprise Micro 5.4 libcap as a component of SUSE Linux Enterprise Micro 5.4 libcap2 as a component of SUSE Linux Enterprise Micro 5.5 libcap as a component of SUSE Linux Enterprise Micro 5.5 libcap-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcap-progs as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcap2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcap2-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libpsx2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcap as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcap as a component of SUSE Linux Enterprise Server 11 SP4 LTSS libcap-progs as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcap2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcap2-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcap as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcap-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcap-progs as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcap2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcap2-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcap2-64bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcap as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcap-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libcap-progs as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libcap2 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libcap2-32bit as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libcap as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libcap as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security libcap-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcap-progs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcap2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcap2-32bit as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcap as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcap-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcap-progs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcap2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcap2-32bit as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcap as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcap-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcap-progs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcap2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcap2-32bit as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcap as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcap-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libcap-progs as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libcap2 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libcap2-32bit as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libpsx2 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libcap as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libcap-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libcap-progs as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libcap2 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libcap2-32bit as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libpsx2 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libcap as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libcap-devel as a component of SUSE Linux Enterprise Server 15-LTSS libcap-progs as a component of SUSE Linux Enterprise Server 15-LTSS libcap2 as a component of SUSE Linux Enterprise Server 15-LTSS libcap2-32bit as a component of SUSE Linux Enterprise Server 15-LTSS libcap as a component of SUSE Linux Enterprise Server 15-LTSS libcap as a component of SUSE Linux Enterprise Server Teradata 12 SP3 libcap as a component of SUSE Linux Enterprise Server Teradata 15 SP4 libcap-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcap-progs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcap2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcap2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcap as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcap-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libcap-progs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libcap2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libcap2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libpsx2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libcap as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libcap-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libcap-progs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libcap2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libcap2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libpsx2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libcap as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libcap2 as a component of SUSE Linux Micro 6.0 libcap as a component of SUSE Linux Micro 6.0 libcap2 as a component of SUSE Linux Micro 6.1 libcap as a component of SUSE Linux Micro 6.1 libcap-devel as a component of SUSE Manager Proxy 4.3 libcap-progs as a component of SUSE Manager Proxy 4.3 libcap2 as a component of SUSE Manager Proxy 4.3 libcap2-32bit as a component of SUSE Manager Proxy 4.3 libpsx2 as a component of SUSE Manager Proxy 4.3 libcap as a component of SUSE Manager Proxy 4.3 libcap-devel as a component of SUSE Manager Retail Branch Server 4.3 libcap-progs as a component of SUSE Manager Retail Branch Server 4.3 libcap2 as a component of SUSE Manager Retail Branch Server 4.3 libcap2-32bit as a component of SUSE Manager Retail Branch Server 4.3 libpsx2 as a component of SUSE Manager Retail Branch Server 4.3 libcap as a component of SUSE Manager Retail Branch Server 4.3 libcap-devel as a component of SUSE Manager Server 4.3 libcap-progs as a component of SUSE Manager Server 4.3 libcap2 as a component of SUSE Manager Server 4.3 libcap2-32bit as a component of SUSE Manager Server 4.3 libpsx2 as a component of SUSE Manager Server 4.3 libcap as a component of SUSE Manager Server 4.3 libcap-devel as a component of openSUSE Leap 15.6 libcap-progs as a component of openSUSE Leap 15.6 libcap2 as a component of openSUSE Leap 15.6 libcap2-32bit as a component of openSUSE Leap 15.6 libpsx2 as a component of openSUSE Leap 15.6 libpsx2-32bit as a component of openSUSE Leap 15.6 libcap as a component of openSUSE Leap 15.6 The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames. CVE-2025-1390 SLES-LTSS-TERADATA 15 SP2:libcap SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcap SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcap-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcap-progs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcap2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcap2-32bit SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcap SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcap-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcap-progs SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcap2 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcap2-32bit SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libpsx2 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcap SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcap-devel SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcap-progs SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcap2 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcap2-32bit SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libpsx2 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcap SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcap-devel SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcap-progs SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcap2 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcap2-32bit SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libpsx2 SUSE Linux Enterprise Micro 5.1:libcap SUSE Linux Enterprise Micro 5.1:libcap2 SUSE Linux Enterprise Micro 5.2:libcap SUSE Linux Enterprise Micro 5.2:libcap2 SUSE Linux Enterprise Micro 5.3:libcap SUSE Linux Enterprise Micro 5.3:libcap2 SUSE Linux Enterprise Micro 5.4:libcap SUSE Linux Enterprise Micro 5.4:libcap2 SUSE Linux Enterprise Micro 5.5:libcap SUSE Linux Enterprise Micro 5.5:libcap2 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcap SUSE Linux Enterprise Module for Basesystem 15 SP6:libcap-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:libcap-progs SUSE Linux Enterprise Module for Basesystem 15 SP6:libcap2 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcap2-32bit SUSE Linux Enterprise Module for Basesystem 15 SP6:libpsx2 SUSE Linux Enterprise Server 11 SP4 LTSS:libcap SUSE Linux Enterprise Server 12 SP2-LTSS:libcap SUSE Linux Enterprise Server 12 SP2-LTSS:libcap-progs SUSE Linux Enterprise Server 12 SP2-LTSS:libcap2 SUSE Linux Enterprise Server 12 SP2-LTSS:libcap2-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:libcap SUSE Linux Enterprise Server 12 SP4-LTSS:libcap-devel SUSE Linux Enterprise Server 12 SP4-LTSS:libcap-progs SUSE Linux Enterprise Server 12 SP4-LTSS:libcap2 SUSE Linux Enterprise Server 12 SP4-LTSS:libcap2-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:libcap2-64bit SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:libcap SUSE Linux Enterprise Server 12 SP5-LTSS:libcap SUSE Linux Enterprise Server 12 SP5-LTSS:libcap-devel SUSE Linux Enterprise Server 12 SP5-LTSS:libcap-progs SUSE Linux Enterprise Server 12 SP5-LTSS:libcap2 SUSE Linux Enterprise Server 12 SP5-LTSS:libcap2-32bit SUSE Linux Enterprise Server 15 SP1-LTSS:libcap SUSE Linux Enterprise Server 15 SP1-LTSS:libcap-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libcap-progs SUSE Linux Enterprise Server 15 SP1-LTSS:libcap2 SUSE Linux Enterprise Server 15 SP1-LTSS:libcap2-32bit SUSE Linux Enterprise Server 15 SP2-LTSS:libcap SUSE Linux Enterprise Server 15 SP2-LTSS:libcap-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libcap-progs SUSE Linux Enterprise Server 15 SP2-LTSS:libcap2 SUSE Linux Enterprise Server 15 SP2-LTSS:libcap2-32bit SUSE Linux Enterprise Server 15 SP3-LTSS:libcap SUSE Linux Enterprise Server 15 SP3-LTSS:libcap-devel SUSE Linux Enterprise Server 15 SP3-LTSS:libcap-progs SUSE Linux Enterprise Server 15 SP3-LTSS:libcap2 SUSE Linux Enterprise Server 15 SP3-LTSS:libcap2-32bit SUSE Linux Enterprise Server 15 SP4-LTSS:libcap SUSE Linux Enterprise Server 15 SP4-LTSS:libcap-devel SUSE Linux Enterprise Server 15 SP4-LTSS:libcap-progs SUSE Linux Enterprise Server 15 SP4-LTSS:libcap2 SUSE Linux Enterprise Server 15 SP4-LTSS:libcap2-32bit SUSE Linux Enterprise Server 15 SP4-LTSS:libpsx2 SUSE Linux Enterprise Server 15 SP5-LTSS:libcap SUSE Linux Enterprise Server 15 SP5-LTSS:libcap-devel SUSE Linux Enterprise Server 15 SP5-LTSS:libcap-progs SUSE Linux Enterprise Server 15 SP5-LTSS:libcap2 SUSE Linux Enterprise Server 15 SP5-LTSS:libcap2-32bit SUSE Linux Enterprise Server 15 SP5-LTSS:libpsx2 SUSE Linux Enterprise Server 15-LTSS:libcap SUSE Linux Enterprise Server 15-LTSS:libcap-devel SUSE Linux Enterprise Server 15-LTSS:libcap-progs SUSE Linux Enterprise Server 15-LTSS:libcap2 SUSE Linux Enterprise Server 15-LTSS:libcap2-32bit SUSE Linux Enterprise Server Teradata 12 SP3:libcap SUSE Linux Enterprise Server Teradata 15 SP4:libcap SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcap SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcap-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcap-progs SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcap2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcap2-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcap SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcap-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcap-progs SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcap2 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcap2-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP4:libpsx2 SUSE Linux Enterprise Server for SAP Applications 15 SP5:libcap SUSE Linux Enterprise Server for SAP Applications 15 SP5:libcap-devel SUSE Linux Enterprise Server for SAP Applications 15 SP5:libcap-progs SUSE Linux Enterprise Server for SAP Applications 15 SP5:libcap2 SUSE Linux Enterprise Server for SAP Applications 15 SP5:libcap2-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP5:libpsx2 SUSE Linux Micro 6.0:libcap SUSE Linux Micro 6.0:libcap2 SUSE Linux Micro 6.1:libcap SUSE Linux Micro 6.1:libcap2 SUSE Manager Proxy 4.3:libcap SUSE Manager Proxy 4.3:libcap-devel SUSE Manager Proxy 4.3:libcap-progs SUSE Manager Proxy 4.3:libcap2 SUSE Manager Proxy 4.3:libcap2-32bit SUSE Manager Proxy 4.3:libpsx2 SUSE Manager Retail Branch Server 4.3:libcap SUSE Manager Retail Branch Server 4.3:libcap-devel SUSE Manager Retail Branch Server 4.3:libcap-progs SUSE Manager Retail Branch Server 4.3:libcap2 SUSE Manager Retail Branch Server 4.3:libcap2-32bit SUSE Manager Retail Branch Server 4.3:libpsx2 SUSE Manager Server 4.3:libcap SUSE Manager Server 4.3:libcap-devel SUSE Manager Server 4.3:libcap-progs SUSE Manager Server 4.3:libcap2 SUSE Manager Server 4.3:libcap2-32bit SUSE Manager Server 4.3:libpsx2 openSUSE Leap 15.6:libcap openSUSE Leap 15.6:libcap-devel openSUSE Leap 15.6:libcap-progs openSUSE Leap 15.6:libcap2 openSUSE Leap 15.6:libcap2-32bit openSUSE Leap 15.6:libpsx2 openSUSE Leap 15.6:libpsx2-32bit moderate 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N