Back to today’s briefing

Story perspectives

Critical Linux Vulnerabilities Expose Root Access Risks

6/21/2025

47 8

Summary

Story summary

Cybersecurity experts at Qualys have uncovered two critical vulnerabilities (CVE-2025-6018 and CVE-2025-6019) in major Linux distributions, which could enable attackers to seize root access. These weaknesses target the Pluggable Authentication Modules (PAM) and the udisks daemon. Users are urged to promptly apply patches and adjust Polkit rules to safeguard their systems.

1 of 1

Story summary

Cybersecurity experts at Qualys have uncovered two critical vulnerabilities (CVE-2025-6018 and CVE-2025-6019) in major Linux distributions, which could enable attackers to seize root access. These weaknesses target the Pluggable Authentication Modules (PAM) and the udisks daemon. Users are urged to promptly apply patches and adjust Polkit rules to safeguard their systems.