XFS-Exploit on Netacoding | Cybersecurity, Assembly & Network Research https://netacoding.com/tags/xfs-exploit/ Recent content in XFS-Exploit on Netacoding | Cybersecurity, Assembly & Network Research Netacoding | Cybersecurity, Assembly & Network Research https://netacoding.com/img/logo-netacoding.png https://netacoding.com/img/logo-netacoding.png Hugo en-us Fri, 27 Mar 2026 11:20:47 +0300 CVE-2025-6019: udisks2 TOCTOU Race Condition → Local Privilege Escalation | Polkit Bypass & SUID Exploit https://netacoding.com/posts/udisks2-cve_lpe/ Fri, 27 Mar 2026 11:20:47 +0300 https://netacoding.com/posts/udisks2-cve_lpe/ CVE-2025-6019: udisks2 XFS resize creates /tmp/blockdev.XXXXXX mount points without immediately applying nosuid — a TOCTOU race window allows SUID binary execution before the flag is set. Polkit bypass via ~/.pam_environment seat0 spoofing, XFS image crafting with mkfs.xfs Protofile, and D-Bus flood trigger. Confirmed on openSUSE Leap 15.6 (kernel 6.4.0).