Is CVE-2024-22365 actively exploited?

No active exploitation of CVE-2024-22365 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-22365 be exploited remotely?

No. CVE-2024-22365 requires local access to exploit.

What is the CVSS score of CVE-2024-22365?

CVE-2024-22365 has a CVSS score of 5.5 (MEDIUM).

HOME VULNERABILITIESCVE-2024-22365

MEDIUM

CVE-2024-22365

NVD-CWE-noinfoPublished: February 6, 2024· Updated: Jun 17, 2026

5.5

CVSS v3.1

Official Description

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

NVD Source

Technical Analysis

CVE-2024-22365 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 5.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Vendors & Products

linux-pam1 product(s)

linux-pam

Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttp://www.openwall.com/lists/oss-security/2024/01/18/3

PATCHhttps://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb

PATCHhttp://www.openwall.com/lists/oss-security/2024/01/18/3

PATCHhttps://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb

News & Research Mentioning CVE-2024-22365

Siemens Ruggedcom Rox

CISA Alerts· May 14, 2026

View CSAF Summary Ruggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Ruggedcom Rox are affected: RUGGEDCOM ROX MX5000 vers:intdot/ data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. View CVE Details Affected Products Siemens Ruggedcom Rox Vendor: Siemens Product Version: RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX151 [xlite_meta score:73 src:CISA Alerts xlite_fp:fa557619a1cae77298fa5e157cc629cc9faaa87a2fc16e1a5bed6e01d4d89758]