Vulnerability · Published Jun 19, 2025 · Assigned by redhat
CVE-2025-6019Libblockdev: lpe from allow_active to root in libblockdev via udisks
High 7.0
In plain English
A high-severity security flaw in libblockdev. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.0High
Exploit odds (30 days)0.5%top 58.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. Normally, udisks mounts user-provided filesystem images with security flags like nosuid and nodev to prevent privilege escalation. However, a local attacker can create a specially crafted XFS image containing a SUID-root shell, then trick udisks into resizing it. This mounts their malicious filesystem with root privileges, allowing them to execute their SUID-root shell and gain complete control of the system.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | libblockdev | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:9 | libblockdev | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-crypto | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-crypto | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-crypto | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-crypto | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-crypto | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:9 | libblockdev-crypto | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-crypto-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-crypto-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-crypto-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-crypto-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-dm | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-dm | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:8 | libblockdev-dm | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-dm | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-dm | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-dm | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:10 | libblockdev-dm-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-dm-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-dm-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-fs | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-fs | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:8 | libblockdev-fs | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-fs | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-fs | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-fs | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:10 | libblockdev-fs-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-fs-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-fs-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-fs-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:8 | libblockdev-kbd | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-kbd | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-kbd | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-kbd | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:8 | libblockdev-kbd-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-kbd-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-loop | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-loop | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:8 | libblockdev-loop | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-loop | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-loop | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:9 | libblockdev-loop | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-loop-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-loop-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-loop-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-loop-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-lvm | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-lvm | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-lvm | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-lvm | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-lvm | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:9 | libblockdev-lvm | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-lvm-dbus | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-lvm-dbus | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-lvm-dbus | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-lvm-dbus | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-lvm-dbus | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-lvm-dbus | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:10 | libblockdev-lvm-dbus-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-lvm-dbus-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-lvm-dbus-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-lvm-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-lvm-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-lvm-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-lvm-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-mdraid | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-mdraid | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:8 | libblockdev-mdraid | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-mdraid | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-mdraid | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-mdraid | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:10 | libblockdev-mdraid-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-mdraid-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-mdraid-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-mdraid-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-mpath | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-mpath | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:8 | libblockdev-mpath | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-mpath | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-mpath | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-mpath | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:10 | libblockdev-mpath-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-mpath-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-mpath-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-nvdimm | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-nvdimm | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-nvdimm | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-nvdimm | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-nvdimm | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:9 | libblockdev-nvdimm | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-nvdimm-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-nvdimm-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-nvdimm-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-nvme | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-nvme | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:9 | libblockdev-nvme | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:9 | libblockdev-nvme | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-nvme-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:9 | libblockdev-nvme-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-part | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-part | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-part | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-part | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-part | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-part | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:10 | libblockdev-part-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-part-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-part-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-part-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-plugins-all | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-plugins-all | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-plugins-all | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-plugins-all | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-plugins-all | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-plugins-all | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:10 | libblockdev-s390 | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-s390 | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-s390 | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-s390 | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-s390 | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:9 | libblockdev-s390 | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-s390-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-s390-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-s390-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-smart | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-smart | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-smart-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-smartmontools | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-smartmontools | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-smartmontools-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-swap | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-swap | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:8 | libblockdev-swap | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-swap | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-swap | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-swap | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:10 | libblockdev-swap-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-swap-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-swap-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-swap-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-tools | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | libblockdev-tools | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:8 | libblockdev-tools | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-tools | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:9 | libblockdev-tools | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:10 | libblockdev-utils | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:10 | libblockdev-utils | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-utils | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-utils | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | libblockdev-utils | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:9 | libblockdev-utils | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:10 | libblockdev-utils-devel | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:8 | libblockdev-utils-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-utils-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:9 | libblockdev-utils-devel | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| AlmaLinux:8 | libblockdev-vdo | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-vdo | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | libblockdev-vdo-devel | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:8 | libblockdev-vdo-devel | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:10 | python3-blockdev | 3.2.0-3.el10_0.alma.1 | ALSA-2025:A006 |
| AlmaLinux:10 | python3-blockdev | 3.2.0-4.el10_0 | ALSA-2025:9328 |
| AlmaLinux:8 | python3-blockdev | 2.28-6.el8.alma.1 | ALSA-2025:A004 |
| AlmaLinux:8 | python3-blockdev | 2.28-7.el8_10 | ALSA-2025:9878 |
| AlmaLinux:9 | python3-blockdev | 2.28-14.el9_6 | ALSA-2025:9327 |
| AlmaLinux:9 | python3-blockdev | 2.28-13.el9_6.alma.1 | ALSA-2025:A005 |
| Debian:12 | libblockdev | 2.28-2+deb12u1 | DEBIAN-CVE-2025-6019 |
| Debian:12 | libblockdev | 2.28-2+deb12u1 | DSA-5943-1 |
| Debian:13 | libblockdev | 3.3.0-2.1 | DEBIAN-CVE-2025-6019 |
| Debian:14 | libblockdev | 3.3.0-2.1 | DEBIAN-CVE-2025-6019 |
| Rocky Linux:10 | libblockdev | 0:3.2.0-4.el10_0 | RLSA-2025:9328 |
| Rocky Linux:8 | libblockdev | 0:2.28-7.el8_10 | RLSA-2025:9878 |
| Rocky Linux:9 | libblockdev | 0:2.28-14.el9_6 | RLSA-2025:9327 |
| Ubuntu:22.04:LTS | libblockdev | 2.26-1ubuntu0.1 | USN-7577-1 |
| Ubuntu:22.04:LTS | libblockdev | 2.26-1ubuntu0.1 | UBUNTU-CVE-2025-6019 |
| Ubuntu:24.04:LTS | libblockdev | 3.1.1-1ubuntu0.1 | UBUNTU-CVE-2025-6019 |
| Ubuntu:24.04:LTS | libblockdev | 3.1.1-1ubuntu0.1 | USN-7577-1 |
| Ubuntu:22.04:LTS | udisks2 | 2.9.4-1ubuntu2.2 | USN-7578-1 |
| Ubuntu:22.04:LTS | udisks2 | 2.9.4-1ubuntu2.2 | UBUNTU-CVE-2025-6019 |
| Ubuntu:24.04:LTS | udisks2 | 2.10.1-6ubuntu1.2 | USN-7578-1 |
| Ubuntu:24.04:LTS | udisks2 | 2.10.1-6ubuntu1.2 | UBUNTU-CVE-2025-6019 |
| Ubuntu:25.10 | udisks2 | 2.10.1-12.1ubuntu1 | UBUNTU-CVE-2025-6019 |
Affected products (as reported)
Weakness: CWE-250 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- RHSA-2025:10796 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9320 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9321 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9322 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9323 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9324 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9325 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9326 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9327 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9328 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9878 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-6019 vdb-entry, x_refsource_REDHAT
- RHBZ#2370051 issue-tracking, x_refsource_REDHAT
- https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt
- http://www.openwall.com/lists/oss-security/2025/06/17/5
- http://www.openwall.com/lists/oss-security/2025/06/17/6
- https://lists.debian.org/debian-lts-announce/2025/06/msg00018.html
- http://www.openwall.com/lists/oss-security/2025/06/18/1
- https://www.bleepingcomputer.com/news/linux/new-linux-udisks-flaw-lets-attackers-get-root-on-major-linux-distros/
- https://news.ycombinator.com/item?id=44325861