A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.
PoC: CVE-2025-6018_CVE-2025-6019_autopwn
Auto exploit for CVE-2025-6018 & CVE-2025-6019 based on https://github.com/0rionCollector/Exploit-Chain-CVE-2025-6018-6019
PoC: opensuse-leap-privesc-exploit
Privilege escalation exploit chain (CVE-2025-6018 + CVE-2025-6019) for openSUSE Leap 15.6
PoC: CVE-2025-6018-and-CVE-2025-6019
Vulnerability chaining leads to privilege escalation
PoC: CVE-2025-6018-6019
CVE-2025-6018 CVE-2025-6019 PoC Exploit - Local Privilege Escalation in openSUSE/SUSE Linux Enterprise 15 - PAM bypass + udisks2 XFS race condition LPE to root
PoC: CVE-2025-6018-19
CVE-2025-6018 (pam LPE unpriv->allow_active), CVE-2025-6019 (udisks LPE allow_active->root) in sh
PoC: CVE-2025-6018-6019-PoC
A Proof of Concept for chaining CVE-2025-6018 (PAM/Polkit Active Session Bypass) and CVE-2025-6019 (libblockdev SUID Mount Flaw) to achieve Local Privilege Escalation (LPE) on vulnerable Linux systems.
PoC: Exploit-Chain-CVE-2025-6018-6019
Exploit Chain of CVE-2025-6018 to CVE-2025-6019
PoC: CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Exploit
PoC: CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation
This is just a quick note on how to exploit these vulnerabilities to get root.
PoC: Blackash-CVE-2025-6018
CVE-2025-6018
PoC: CVE-2025-6018
CVE-2025-6018 Poc and Exploit
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free