Detections
Analytics
CVE-2025-6019
high
Description
A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. Normally, udisks mounts user-provided filesystem images with security flags like nosuid and nodev to prevent privilege escalation. However, a local attacker can create a specially crafted XFS image containing a SUID-root shell, then trick udisks into resizing it. This mounts their malicious filesystem with root privileges, allowing them to execute their SUID-root shell and gain complete control of the system.
References
https://access.redhat.com/errata/RHSA-2025:9878
https://access.redhat.com/errata/RHSA-2025:9328
https://access.redhat.com/errata/RHSA-2025:9327
https://access.redhat.com/errata/RHSA-2025:9326
https://access.redhat.com/errata/RHSA-2025:9325
https://access.redhat.com/errata/RHSA-2025:9324
https://access.redhat.com/errata/RHSA-2025:9323
https://access.redhat.com/errata/RHSA-2025:9322
https://access.redhat.com/errata/RHSA-2025:9321
https://github.com/karimelsheikh1/HTB-Pterodactyl-Writeup
https://github.com/m0r4a/CVE-2026-6018-9-Local-Privilege-Escalation-Chain
https://github.com/V0idW1re/htb-pterodactyl-writeup
https://github.com/e1arth/CVE-2025-6018
https://github.com/iOxsec/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
https://github.com/MaxKappa/opensuse-leap-privesc-exploit
https://github.com/localh0ste/CVE-2025-6018-and-CVE-2025-6019
https://github.com/DesertDemons/CVE-2025-6018-6019
https://github.com/boboaung1337/CVE-2025-6019
https://github.com/matesz44/CVE-2025-6018-19
https://github.com/symphony2colour/CVE-2025-6019-udisks-lpe-no-image
https://github.com/MichaelVenturella/CVE-2025-6018-6019-PoC
https://github.com/0rionCollector/Exploit-Chain-CVE-2025-6018-6019
https://github.com/muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
https://github.com/AzureADTrent/CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation
https://github.com/MatteoLupinacci/PoC4CVEs
https://github.com/phamdinhquy2512/CVE-2025-6019-Exploitation
https://github.com/robbin0919/CVE-2025-6019
https://github.com/euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019
https://github.com/B1ack4sh/Blackash-CVE-2025-6018
https://github.com/ShaneWan/cve-poc
https://github.com/dreysanox/CVE-2025-6019_Poc
https://github.com/dreysanox/CVE-2025-6018_Poc
https://github.com/Hephexus/cve
https://github.com/neko205-mx/CVE-2025-6019_Exploit
https://github.com/mistrust999/PAM-UDisks-PrivEsc-Metasploit
https://github.com/PuddinCat/GithubRepoSpider
https://news.ycombinator.com/item?id=44325861
https://lists.debian.org/debian-lts-announce/2025/06/msg00018.html
https://bugzilla.redhat.com/show_bug.cgi?id=2370051
https://access.redhat.com/security/cve/CVE-2025-6019
http://www.openwall.com/lists/oss-security/2025/06/18/1