{"uuid": "9766d58c-8f93-45a1-a9c6-67455699845e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6019", "type": "seen", "source": "https://t.me/cve0day/224", "content": "CVE-2025-6019\nAuthor: symphony2colour\n\nA Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the \"allowactive\" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an \"allowactive\" user on a system may be able escalate to full root privileges on the target host. Normally, udisks mounts user-provided filesystem images with security flags like nosuid and nodev to prevent privilege escalation.  However, a local attacker can create a specially crafted XFS image containing a SUID-root shell, then trick udisks into resizing it. This mounts their malicious filesystem with root privileges, allowing them to execute their SUID-root shell and gain complete control of the system.\n\nGitHub Link:\nhttps://github.com/symphony2colour/CVE-2025-6019-udisks-lpe-no-image", "creation_timestamp": "2026-08-28T00:00:42.322496Z"}