Introduction

Recent discoveries have unveiled two critical vulnerabilities in major Linux distributions that allow unprivileged attackers to escalate their privileges to root access. These vulnerabilities, identified as CVE-2025-6018 and CVE-2025-6019, exploit weaknesses in the Pluggable Authentication Modules (PAM) and the udisks daemon, posing a significant security threat to millions of users worldwide.

Introduction

The Bundesamt für Sicherheit in der Informationstechnik (BSI) released an update on June 10, 2025, regarding a security vulnerability in the Linux Kernel that was first identified on January 18, 2023. This vulnerability impacts a wide range of operating systems and products, including Debian, Ubuntu, and various commercial solutions.