New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

/in

Cybersecurity researchers have uncovered two local privilege escalation (LPE) flaws that could be exploited to gain root privileges on machines running major Linux distributions.
The vulnerabilities, discovered by Qualys, are listed below –

CVE-2025-6018 – LPE from unprivileged to allow_active in SUSE 15’s Pluggable Authentication Modules (PAM)
CVE-2025-6019 – LPE from allow_active to root in

The Hacker News – ​Read More

The Triple Threat of Burnout: Overworked, Unsatisfied, TrappedThe Triple Threat of Burnout: Overworked, Unsatisfied, TrappedIran-Israel War Triggers a Maelstrom in CyberspaceIran-Israel War Triggers a Maelstrom in Cyberspace