Skip to content
Threat Feed
Subscribe

Product

UDisks2

2 briefs RSS
high advisory

Local Privilege Escalation Chain on SUSE Linux via CVE-2025-6018 and CVE-2025-6019

An exploit chain targeting SUSE Linux systems leverages CVE-2025-6018 and CVE-2025-6019 to achieve local privilege escalation to root by abusing PAM environment injection and a race condition in UDisks2.

pam-config +3
2t 2c
high advisory

Local Privilege Escalation in udisks2 via D-Bus Mount Injection

A local privilege escalation vulnerability in udisks2 allows authenticated console users to bypass authorization checks in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method to mount filesystems as privileged users.

udisks2
1t 1c