This repository provides two Metasploit Framework exploit modules designed to exploit the vulnerabilities CVE-2025-6018 and CVE-2025-6019 discovered by Qualys:

• CVE-2025-6018: Privilege escalation from an unprivileged SSH user to a polkit "allow_active" user via PAM environment manipulation on openSUSE Leap 15 and SUSE Linux Enterprise 15.

• CVE-2025-6019: Privilege escalation from a polkit "allow_active" user to full root access via a vulnerable filesystem resize operation provided by libblockdev through the udisks daemon.

1. Place Modules into Metasploit:

Copy both .rb exploit module files into your Metasploit modules directory:

~/.msf4/modules/exploits/linux/local/

2. Reload Metasploit modules:

In Metasploit console:

msf > reload_all

3. Exploit:

• Start a session on the vulnerable host.
• Run CVE-2025-6018 module first to escalate to "allow_active" privileges.
• Run CVE-2025-6019 module next to escalate to full root privileges.

Within a Metasploit session:

use exploit/linux/local/opensuse_suse_pam_env
run
# Follow instructions to establish allow_active privileges

use exploit/linux/local/udisks_libblockdev_xfs_resize
run
# Gain full root shell

• CVE-2025-6018: Requires user re-login or a new SSH session to activate.
• CVE-2025-6019: Requires "allow_active" user privileges, achievable via CVE-2025-6018 or similar vulnerabilities.

Original discovery and detailed analysis by Qualys Security Advisory.

This is the link to Qualys' original Proof of Concept

These modules are provided for educational and ethical penetration testing purposes only. Unauthorized use is strictly prohibited.

Disclaimer: This README was generated with the assistance of AI