Qualys TRU Uncovers Chained LPE: SUSE 15 PAM to Full Root via libblockdev/udisks | Qualys
Qualys TRU found two linked local privilege escalation flaws: CVE-2025-6018, a PAM misconfiguration in openSUSE Leap 15 and SUSE Linux Enterprise 15 that lets an unprivileged local user such as an SSH session reach the "allow_active" context, and...