CVE-2025-6019

CVE-2025-6019 Доказательство концепции PoC Этот репозиторий содержит скрипт доказательства концепции PoC для CVE-2025-6019 , уязвимости локального повышения привилегий LPE в libblockdev и udisks. Скрипт создает образ файловой системы XFS с бинарным файлом bash с установленным SUID и эксплуатирует...

opensuse-leap-privesc-exploit

Цепочка эксплойтов CVE-2025-6018 + CVE-2025-6019 Этот эксплойт был разработан для решения задания HackTheBox, нацеленного на openSUSE Leap 15.6. Авторы Данный эксплойт основан на оригинальном исследовании команды Qualys Security: Уведомление:...

CVE-2026-6018-9-Local-Privilege-Escalation-Chain

CVE-2025-6018 + CVE-2025-6019: Цепочка локального повышения привилегий Целевая ОС: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x Требуемый доступ: Непривилегированный локальный пользователь с доступом по SSH Результат: Полный root-шелл Обзор В этом документе описывается ручная эксплуатация двух...

CVE-2025-6019

CVE-2025-6019: Уязвимость повышения привилегий локального пользователя в libblockdev Резюме CVE-2025-6019 — это уязвимость повышения привилегий LPE в библиотеке libblockdev, которая взаимодействует с демоном udisks2 и Polkit. Описание уязвимости Локальный атакующий с правами allowactive в Polkit...

Rocky Linux 8.6 [CIQ] Security Update: libblockdev / libblockdev-crypto / libblockdev-crypto-debuginfo / etc (ciqsa-2026_0071)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260071 advisory. This advisory aggregates security fixes for the libblockdev SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2025-6019. Tenable has extracted the preceding descriptio...

AlmaLinux 9.2 [TuxCare] Security Update: libblockdev / libblockdev-crypto / libblockdev-crypto-devel / etc (ALMALINUX9.2:CLSA-2025:1754340109)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754340109 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.2 [CIQ] Security Update: libblockdev / libblockdev-crypto / libblockdev-crypto-debuginfo / etc (ciqsa-2026_0441)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260441 advisory. This advisory aggregates security fixes for the libblockdev SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2025-6019. Tenable has extracted the preceding descriptio...

CentOS Linux 7 [TuxCare] Security Update: libblockdev / libblockdev-btrfs / libblockdev-btrfs-devel / etc (CENTOS7:CLSA-2025:1753131177)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1753131177 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt Этот эксплойт объединяет CVE-2025-6018 и CVE-2025-6019 для повышения привилегий от непривилегированного пользователя до root на уязвимых системах SUSE/openSUSE. CVE-2025-6018 — это уязвимость внедрения переменных окружения в PAM Pluggab...

CVE-2025-6018-6019-PoC

CVE-2025-6018 и CVE-2025-6019: PoC локального повышения привилегий Надёжный Proof of Concept PoC для объединения CVE-2025-6018 обход активной сессии PAM/Polkit и CVE-2025-6019 ошибка SUID-монтирования в libblockdev для получения root-доступа на уязвимых Linux-системах. Отказ от ответственности Эт...

CVE-2025-6018-and-CVE-2025-6019

Проверка уязвима ли система rpm -q pam || dpkg -l | grep libpam or find /etc/pam.d/ -name '' -exec grep -l 'pamenv' \; 2/dev/null or find /etc/pam.d/ -name '' -exec grep -l 'pamsystemd' \; 2/dev/null or systemctl --version | head -1 Если версия входит в список: обнаружена уязвимая версия PAM...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018 & CVE-2025-6019 PoC A Proof of Concept for chai...

MiracleLinux 7 : libblockdev-2.18-5.0.1.el7.AXS7 (AXSA:2025-10699:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10699:04 advisory. CVE-2025-6019: don't allow suid and dev set on fs resize CVEs: CVE-2025-6019 A Local Privilege Escalation LPE vulnerability was found in libblockdev...

MiracleLinux 8 : libblockdev-2.28-7.el8_10 (AXSA:2025-10409:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10409:02 advisory. libblockdev: LPE from allowactive to root in libblockdev via udisks CVE-2025-6019 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : libblockdev-2.28-14.el9_6 (AXSA:2025-10552:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10552:03 advisory. libblockdev: LPE from allowactive to root in libblockdev via udisks CVE-2025-6019 Tenable has extracted the preceding description block directly from the...

Advisory ROSA-SA-2025-3084

Software: libblockdev 2.18 OS: rosa-server79 unaffected versions = libblockdev-2.18-5.0.1.res7 affected versions libblockdev-2.18-5.0.1.1.res7 CVE-ID: CVE-2025-6019 BDU-ID: 2025-07084 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libblockdev library is related to the ability to mount the file...

CLSA-2025-1764325063 libblockdev: Fix of CVE-2025-6019

CVE-2025-6019: don't allow suid and dev set on fs resize...

TencentOS Server 4: udisks2 (TSSA-2025:0480)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0480 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 2: libblockdev (TSSA-2025:0535)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0535 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 4: libblockdev (TSSA-2025:0478)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0478 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...