CVE-2025-6019

CVE-2025-6019 Prueba de Concepto PoC Este repositorio contiene un script de Prueba de Concepto PoC para CVE-2025-6019 , una vulnerabilidad de Escalada de Privilegios Local LPE en libblockdev y udisks. El script crea una imagen de sistema de archivos XFS con un binario SUID bash y explota la...

CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation

CVE-2025-6019: Escalada de Privilegios TOCTOU en udisks2 por Redimensionamiento de XFS Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-6019, una vulnerabilidad de Condición de Carrera en udisks2 que permite la escalada local de privilegios mediante el redimensionamiento del...

CVE-2025-6019

CVE-2025-6019 PoC Prueba de concepto sencilla para una escalada de privilegios mediante el redimensionado de XFS en UDisks2. Archivos createpayload.sh: Construye una imagen XFS con un payload SUID rootbash. exploit.sh: Activa la ruta de redimensionado y lanza la shell SUID. Requisitos mkfs.xfs,...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 中文 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image...

SUSE SLES12 Security Update : kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3820-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3820-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: -...

SUSE SLES12 Security Update : kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3808-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3808-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:3819-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3819-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3807-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3807-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed:...

SUSE SLES15 Security Update : kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3821-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3821-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:3829-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3829-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed:...

CVE-2025-6018-6019

CVE-2025-6018 CVE-2025-6019 PoC Exploit Local Privilege Escalation LPE - openSUSE / SUSE Linux Enterprise 15 Working PoC/Exploit for CVE-2025-6018 and CVE-2025-6019 - Privilege escalation from unprivileged user to root on openSUSE Leap 15.x and SUSE Linux Enterprise 15.x 🎯 Quick Summary CVE ID|...

CVE-2025-6019-udisks-lpe-no-image

CVE-2025-6019-udisks-lpe-no-image Catena di escalation dei privilegi basata solo su script che utilizza CVE-2025-6019 e UDisks2 nessuna immagine del filesystem inclusa. Crediti, Contesto e Catena dell'Exploit Questo repository non introduce una nuova vulnerabilità. La tecnica di escalation dei...

CVE-2026-64600-Refluxfs-PoC

RefluXFS CVE-2026-64600 PoC Questa repo contiene un PoC della vulnerabilità di race condition recentemente scoperta che interessa il COW su XFS, segnalata dall'eccellente Qualys Security Team. 1 2 Info sul PoC Scritto a mano basandosi sull'eccellente analisi dell'advisory di Qualys. Riscrive i...

CVE-2026-64600

CVE-2026-64600 – Strumento di Rilevamento e Mitigazione RefluXFS Questo repository fornisce un'utilità C completa per rilevare , verificare in sicurezza e mitigare la vulnerabilità RefluXFS CVE‑2026‑64600 su sistemi Linux con filesystem XFS. Lo strumento verifica la presenza di un kernel...

CVE-2025-6018-and-CVE-2025-6019

Prüfen ob verwundbar oder nicht root@kitploit: rpm -q pam || dpkg -l | grep libpam or find /etc/pam.d/ -name '' -exec grep -l 'pamenv' \; 2/dev/null or find /etc/pam.d/ -name '' -exec grep -l 'pamsystemd' \; 2/dev/null or systemctl --version | head -1 Wenn Version enthalten ist:Verwundbare...

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation

CVE-2025-6018-e-CVE-2025-6019-Escalatazione-dei-privilegi Questa è solo una breve nota su come sfruttare queste vulnerabilità per ottenere root. Inizia utilizzando questo tool sulla macchina attaccante: https://raw.githubusercontent.com/ibrahmsql/CVE-2025-6018/refs/heads/main/CVE-202 Ora dovresti...

CVE-2025-6019

CVE-2025-6019: Lokale Privilegienausweitung in libblockdev Zusammenfassung CVE-2025-6019 ist eine Sicherheitslücke zur lokalen Privilegienausweitung LPE in der Bibliothek libblockdev, die mit dem udisks2-Daemon und Polkit zusammenwirkt. Beschreibung der Sicherheitslücke Ein lokaler Angreifer mit...

CVE-2025-6019_Exploit

CVE-2025-6019Exploit Primo passo: esegui 1.sh su un dispositivo Linux per costruire xfs.image Secondo passo: trasferisci xfs.image sul dispositivo vittima ed esegui 2.sh. Di seguito un esempio di successo: root@kitploit: neko@aosc-neko205 tmp $ bash 2.sh 当前用户: neko uid=1000neko gid=1001neko...

EUVD-2026-66449

In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfsdqgetnextid xfsdqgetnextid takes the quota inode ILOCK before calling xfsireadextents. If xfsireadextents fails, the function returns immediately without releasing the lock, leaking the quota...

EUVD-2026-66452

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where the trailing "+ 1" already accounts for the inode-root level, so the...