Local Privilege Escalation in Linux Pluggable Authentication Modules (PAM) by Red Hat
CVE-2025-6018

7.8HIGH

Key Information:

Status: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9
Vendor: CVE Published:; 23 July 2025

Badges

📰 News Worthy

What is CVE-2025-6018?

A Local Privilege Escalation vulnerability exists in pam-config, part of the Linux Pluggable Authentication Modules (PAM). This flaw permits a local attacker, such as an SSH user, to escalate their privileges to those of a privileged console user. By exploiting this vulnerability, attackers can execute Polkit actions typically restricted to physically present users, resulting in unauthorized control over system settings, services, and sensitive operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

News Articles

CVE-2025-6018 CVE-2025-6019

Critical vulnerabilities CVE-2025-6018 and CVE-2025-6019 in Linux systems | Born's Tech and Windows World

[German]Security researchers from Qualys TRU have uncovered two linked, critical vulnerabilities in Linux. Starting with SUSE 15, the LPE chain leads directly to root access in standard configurations of many...

Cyber Security Agency of Singapore

CVE-2025-6018 CVE-2025-6019

Multiple Vulnerabilities in Major Linux Distributions

Security researchers identified two new LPE vulnerabilities that can be chained together to gain root privileges on systems running major Linux distributions.