Detections
Analytics
CVE-2025-6018
high
Description
A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.
References
https://github.com/karimelsheikh1/HTB-Pterodactyl-Writeup
https://github.com/m0r4a/CVE-2026-6018-9-Local-Privilege-Escalation-Chain
https://github.com/V0idW1re/htb-pterodactyl-writeup
https://github.com/e1arth/CVE-2025-6018
https://github.com/iOxsec/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
https://github.com/MaxKappa/opensuse-leap-privesc-exploit
https://github.com/localh0ste/CVE-2025-6018-and-CVE-2025-6019
https://github.com/DesertDemons/CVE-2025-6018-6019
https://github.com/matesz44/CVE-2025-6018-19
https://github.com/symphony2colour/CVE-2025-6019-udisks-lpe-no-image
https://github.com/MichaelVenturella/CVE-2025-6018-6019-PoC
https://github.com/0rionCollector/Exploit-Chain-CVE-2025-6018-6019
https://github.com/muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
https://github.com/AzureADTrent/CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation
https://github.com/MatteoLupinacci/PoC4CVEs
https://github.com/robbin0919/CVE-2025-6019
https://github.com/euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019
https://github.com/B1ack4sh/Blackash-CVE-2025-6018
https://github.com/yembors64632/cve_monitor_Public
https://github.com/dreysanox/CVE-2025-6018_Poc
https://github.com/Hephexus/cve
https://github.com/mistrust999/PAM-UDisks-PrivEsc-Metasploit