Introduction

Recent discoveries have unveiled two critical vulnerabilities in major Linux distributions that allow unprivileged attackers to escalate their privileges to root access. These vulnerabilities, identified as CVE-2025-6018 and CVE-2025-6019, exploit weaknesses in the Pluggable Authentication Modules (PAM) and the udisks daemon, posing a significant security threat to millions of users worldwide.