Qualys TRU Uncovers Chained LPE: SUSE 15 PAM to Full Root via libblockdev/udisks

The Qualys Threat Research Unit TRU has discovered two linked local privilege escalation LPE flaws. The first CVE-2025-6018 resides in the PAM configuration of openSUSE Leap 15 and SUSE Linux Enterprise 15. Using this vulnerability, an unprivileged local attacker—for example, via SSH—can elevate ...

Debian dsa-5943 : gir1.2-blockdev-2.0 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5943 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5943-1 [email protected] https://www.debian.org/security/...