Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 8 articles for you...
217
security advisorysecurity issueremote accessOracle Linux 7 ELSA-2025-10796 libblockdev Important Update CVE-2025-6019
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-10796 http://linux.oracle.com/errata/ELSA-2025-10796.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable LinuxNetwork: x86_64: libblockdev-2.18-5.0.1.el7.i686.rpm libblockdev-2.18-5.0.1.el7.x86_64.rpm libblockdev-btrfs-2.18-5.0.1.el7.i686.rpm libblockdev-btrfs-2.18-5.0.1.el7.x86_64.rpm libblockdev-btrfs-devel-2.18-5.0.1.el7.i686.rpm libblockdev-btrfs-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-crypto-2.18-5.0.1.el7.i686.rpm libblockdev-crypto-2.18-5.0.1.el7.x86_64.rpm libblockdev-crypto-devel-2.18-5.0.1.el7.i686.rpm libblockdev-crypto-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-devel-2.18-5.0.1.el7.i686.rpm libblockdev-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-dm-2.18-5.0.1.el7.i686.rpm libblockdev-dm-2.18-5.0.1.el7.x86_64.rpm libblockdev-dm-devel-2.18-5.0.1.el7.i686.rpm libblockdev-dm-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-fs-2.18-5.0.1.el7.i686.rpm libblockdev-fs-2.18-5.0.1.el7.x86_64.rpm libblockdev-fs-devel-2.18-5.0.1.el7.i686.rpm libblockdev-fs-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-kbd-2.18-5.0.1.el7.i686.rpm libblockdev-kbd-2.18-5.0.1.el7.x86_64.rpm libblockdev-kbd-devel-2.18-5.0.1.el7.i686.rpm libblockdev-kbd-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-loop-2.18-5.0.1.el7.i686.rpm libblockdev-loop-2.18-5.0.1.el7.x86_64.rpm libblockdev-loop-devel-2.18-5.0.1.el7.i686.rpm libblockdev-loop-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-lvm-2.18-5.0.1.el7.i686.rpm libblockdev-lvm-2.18-5.0.1.el7.x86_64.rpm libblockdev-lvm-devel-2.18-5.0.1.el7.i686.rpm libblockdev-lvm-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-mdraid-2.18-5.0.1.el7.i686.rpm libblockdev-mdraid-2.18-5.0.1.el7.x86_64.rpm libblockdev-mdraid-devel-2.18-5.0.1.el7.i686.rpm libblockdev-mdraid-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-mpath-2.18-5.0.1.el7.i686.rpm libblockdev-mpath-2.18-5.0.1.el7.x86_64.rpm libblockdev-mpath-devel-2.18-5.0.1.el7.i686.rpm libblockdev-mpath-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-nvdimm-2.18-5.0.1.el7.i686.rpm libblockdev-nvdimm-2.18-5.0.1.el7.x86_64.rpm libblockdev-nvdimm-devel-2.18-5.0.1.el7.i686.rpm libblockdev-nvdimm-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-part-2.18-5.0.1.el7.i686.rpm libblockdev-part-2.18-5.0.1.el7.x86_64.rpm libblockdev-part-devel-2.18-5.0.1.el7.i686.rpm libblockdev-part-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-plugins-all-2.18-5.0.1.el7.x86_64.rpm libblockdev-swap-2.18-5.0.1.el7.i686.rpm libblockdev-swap-2.18-5.0.1.el7.x86_64.rpm libblockdev-swap-devel-2.18-5.0.1.el7.i686.rpm libblockdev-swap-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-utils-2.18-5.0.1.el7.i686.rpm libblockdev-utils-2.18-5.0.1.el7.x86_64.rpm libblockdev-utils-devel-2.18-5.0.1.el7.i686.rpm libblockdev-utils-devel-2.18-5.0.1.el7.x86_64.rpm libblockdev-vdo-2.18-5.0.1.el7.x86_64.rpm libblockdev-vdo-devel-2.18-5.0.1.el7.x86_64.rpm python2-blockdev-2.18-5.0.1.el7.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/libblockdev-2.18-5.0.1.el7.src.rpm Related CVEs: CVE-2025-6019 Description of changes: [2.18-5.0.1] - Don't allow suid and dev set on fs resize (CVE-2025-6019) - [Orabug: 38176252] _______________________________________________ El-errata mailing list
Aug 07, 2025
•Important
Oracle
217
security advisorysecurity issueremote accessOracle Linux 8 ELSA-2025-9878 important: libblockdev issue fix
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-9878 http://linux.oracle.com/errata/ELSA-2025-9878.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: libblockdev-2.28-7.0.1.el8_10.i686.rpm libblockdev-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-btrfs-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-crypto-2.28-7.0.1.el8_10.i686.rpm libblockdev-crypto-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-crypto-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-crypto-devel-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-devel-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-dm-2.28-7.0.1.el8_10.i686.rpm libblockdev-dm-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-fs-2.28-7.0.1.el8_10.i686.rpm libblockdev-fs-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-fs-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-fs-devel-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-kbd-2.28-7.0.1.el8_10.i686.rpm libblockdev-kbd-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-loop-2.28-7.0.1.el8_10.i686.rpm libblockdev-loop-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-loop-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-loop-devel-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-lvm-2.28-7.0.1.el8_10.i686.rpm libblockdev-lvm-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-lvm-dbus-2.28-7.0.1.el8_10.i686.rpm libblockdev-lvm-dbus-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-lvm-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-lvm-devel-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-mdraid-2.28-7.0.1.el8_10.i686.rpm libblockdev-mdraid-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-mdraid-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-mdraid-devel-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-mpath-2.28-7.0.1.el8_10.i686.rpm libblockdev-mpath-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-nvdimm-2.28-7.0.1.el8_10.i686.rpm libblockdev-nvdimm-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-part-2.28-7.0.1.el8_10.i686.rpm libblockdev-part-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-part-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-part-devel-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-plugins-all-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-swap-2.28-7.0.1.el8_10.i686.rpm libblockdev-swap-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-swap-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-swap-devel-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-utils-2.28-7.0.1.el8_10.i686.rpm libblockdev-utils-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-utils-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-utils-devel-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-vdo-2.28-7.0.1.el8_10.i686.rpm libblockdev-vdo-2.28-7.0.1.el8_10.x86_64.rpm libblockdev-vdo-devel-2.28-7.0.1.el8_10.i686.rpm libblockdev-vdo-devel-2.28-7.0.1.el8_10.x86_64.rpm python3-blockdev-2.28-7.0.1.el8_10.x86_64.rpm aarch64: libblockdev-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-btrfs-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-crypto-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-crypto-devel-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-devel-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-dm-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-fs-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-fs-devel-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-kbd-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-loop-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-loop-devel-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-lvm-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-lvm-dbus-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-lvm-devel-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-mdraid-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-mdraid-devel-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-mpath-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-nvdimm-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-part-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-part-devel-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-plugins-all-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-swap-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-swap-devel-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-utils-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-utils-devel-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-vdo-2.28-7.0.1.el8_10.aarch64.rpm libblockdev-vdo-devel-2.28-7.0.1.el8_10.aarch64.rpm python3-blockdev-2.28-7.0.1.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/libblockdev-2.28-7.0.1.el8_10.src.rpm Related CVEs: CVE-2025-6019 Description of changes: [2.28-7.0.1] - enable btrfssupport [Orabug: 30792917] [2.28-7] - Don't allow suid and dev set on fs resize (CVE-2025-6019) Resolves: RHEL-96034 _______________________________________________ El-errata mailing list
Jul 01, 2025
•Important
Oracle
100
security advisorymoderateprivilege escalationSUSE Security Update 2025:20480-1 Critical: libnetwork buffer overflow risk
* bsc#1243226 Cross-References: * CVE-2025-6019 . # Security update for libblockdev Announcement ID: SUSE-SU-2025:20440-1 Release Date: 2025-06-18T08:51:18Z Rating: moderate References: * bsc#1243226 Cross-References: * CVE-2025-6019 CVSS scores: * CVE-2025-6019 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6019 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-6019 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for libblockdev fixes the following issues: * CVE-2025-6019: Suppress privilege escalation during xfs fs resize ( (bsc#1243226) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-150=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libbd_utils2-2.28-slfo.1.1_2.1 * libbd_fs2-2.28-slfo.1.1_2.1 * libblockdev-debugsource-2.28-slfo.1.1_2.1 * libbd_part2-2.28-slfo.1.1_2.1 * libbd_fs2-debuginfo-2.28-slfo.1.1_2.1 * libbd_mdraid2-2.28-slfo.1.1_2.1 * libblockdev2-2.28-slfo.1.1_2.1 * libblockdev-debuginfo-2.28-slfo.1.1_2.1 * libbd_crypto2-2.28-slfo.1.1_2.1 * libbd_lvm2-2.28-slfo.1.1_2.1 * libbd_loop2-debuginfo-2.28-slfo.1.1_2.1 * libbd_lvm2-debuginfo-2.28-slfo.1.1_2.1 * libbd_btrfs2-debuginfo-2.28-slfo.1.1_2.1 * libbd_utils2-debuginfo-2.28-slfo.1.1_2.1 * libbd_loop2-2.28-slfo.1.1_2.1 * libblockdev2-debuginfo-2.28-slfo.1.1_2.1 * libbd_mdraid2-debuginfo-2.28-slfo.1.1_2.1 * libbd_crypto2-debuginfo-2.28-slfo.1.1_2.1 * libbd_swap2-2.28-slfo.1.1_2.1 * libbd_part2-debuginfo-2.28-slfo.1.1_2.1 *libbd_swap2-debuginfo-2.28-slfo.1.1_2.1 * libbd_btrfs2-2.28-slfo.1.1_2.1 * libblockdev-2.28-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6019.html * https://bugzilla.suse.com/show_bug.cgi?id=1243226 . SUSE Linux Micro 6.1 has released a security patch to tackle a moderate vulnerability found in libblockdev, aimed at mitigating potential privilege escalation threats.. SUSE Linux Micro, libblockdev, security update, privilege escalation, software patch. . LinuxSecurity.com Team
Jun 30, 2025
SuSE
217
security advisorysecurity issueaccess controlOracle Linux 10 ELSA-2025-9328 Important: libblockdev Access Control Fix
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-9328 http://linux.oracle.com/errata/ELSA-2025-9328.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable LinuxNetwork: x86_64: libblockdev-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-btrfs-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-crypto-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-dm-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-fs-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-loop-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-lvm-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-lvm-dbus-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-mdraid-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-mpath-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-nvdimm-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-nvme-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-part-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-plugins-all-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-smart-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-smartmontools-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-swap-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-tools-3.2.0-4.0.1.el10_0.x86_64.rpm libblockdev-utils-3.2.0-4.0.1.el10_0.x86_64.rpm python3-blockdev-3.2.0-4.0.1.el10_0.x86_64.rpm aarch64: libblockdev-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-btrfs-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-crypto-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-dm-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-fs-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-loop-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-lvm-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-lvm-dbus-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-mdraid-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-mpath-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-nvdimm-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-nvme-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-part-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-plugins-all-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-smart-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-smartmontools-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-swap-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-tools-3.2.0-4.0.1.el10_0.aarch64.rpm libblockdev-utils-3.2.0-4.0.1.el10_0.aarch64.rpm python3-blockdev-3.2.0-4.0.1.el10_0.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/libblockdev-3.2.0-4.0.1.el10_0.src.rpm Related CVEs: CVE-2025-6019 Description of changes: [3.2.0-4.0.1] - enable btrfs support [Orabug: 30792917] [3.2.0-4] - Don't allow suid and dev set on fs resize - CVE-2025-6019 _______________________________________________ El-errata mailing list
Jun 30, 2025
•Important
Oracle
100
security advisorymoderateprivilege escalationSUSE: 2025:20426-1 moderate: libblockdev CVE-2025-6019 privilege escalation
* bsc#1243226 Cross-References: * CVE-2025-6019 . # Security update for libblockdev Announcement ID: SUSE-SU-2025:20426-1 Release Date: 2025-06-18T08:58:11Z Rating: moderate References: * bsc#1243226 Cross-References: * CVE-2025-6019 CVSS scores: * CVE-2025-6019 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6019 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-6019 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for libblockdev fixes the following issues: * CVE-2025-6019: Suppress privilege escalation during xfs fs resize ( (bsc#1243226) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-360=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libblockdev-debugsource-2.28-2.1 * libbd_loop2-debuginfo-2.28-2.1 * libbd_fs2-debuginfo-2.28-2.1 * libbd_utils2-2.28-2.1 * libbd_lvm2-2.28-2.1 * libbd_utils2-debuginfo-2.28-2.1 * libblockdev2-debuginfo-2.28-2.1 * libblockdev-2.28-2.1 * libbd_btrfs2-debuginfo-2.28-2.1 * libbd_loop2-2.28-2.1 * libbd_fs2-2.28-2.1 * libbd_swap2-2.28-2.1 * libbd_mdraid2-2.28-2.1 * libbd_crypto2-debuginfo-2.28-2.1 * libblockdev-debuginfo-2.28-2.1 * libbd_swap2-debuginfo-2.28-2.1 * libbd_part2-debuginfo-2.28-2.1 * libbd_lvm2-debuginfo-2.28-2.1 * libbd_crypto2-2.28-2.1 * libbd_mdraid2-debuginfo-2.28-2.1 * libbd_part2-2.28-2.1 * libbd_btrfs2-2.28-2.1 * libblockdev2-2.28-2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6019.html * https://bugzilla.suse.com/show_bug.cgi?id=1243226 .SUSE Linux Micro has issued an update for libblockdev, fixing the moderate severity vulnerability CVE-2025-6019 that may result in privilege escalation. SUSE Linux update, libblockdev patch, privilege escalation risk. . Severity: Important. LinuxSecurity.com Team
Jun 26, 2025
•Important
SuSE
203
security advisorycriticallocal privilege escalationMageia 9: MGASA-2025-0188 critical: libblockdev local privilege escalation
A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root . MGASA-2025-0188 - Updated udisks2 & libblockdev packages fix security vulnerabilities Publication date: 24 Jun 2025 URL: https://advisories.mageia.org/MGASA-2025-0188.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-6019 A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. Normally, udisks mounts user-provided filesystem images with security flags like nosuid and nodev to prevent privilege escalation. However, a local attacker can create a specially crafted XFS image containing a SUID-root shell, then trick udisks into resizing it. This mounts their malicious filesystem with root privileges, allowing them to execute their SUID-root shell and gain complete control of the system. References: - https://bugs.mageia.org/show_bug.cgi?id=34380 - https://www.openwall.com/lists/oss-security/2025/06/17/4 - https://www.cve.org/CVERecord?id=CVE-2025-6019 SRPMS: - 9/core/udisks2-2.10.1-1.1.mga9 - 9/core/libblockdev-3.3.1-1.mga9 . Mageia 9 addresses a vital local privilege elevation vulnerability in udisks2 and libblockdev. Swift updates advised.. Mageia advisory, udisks2 patch, libblockdev fix. . Severity: Critical. LinuxSecurity.com Team
Jun 24, 2025
•Critical
Mageia
217
security advisorysecurity issueremote accessOracle Linux 9 ELSA-2025-9327 Important: libblockdev Security Update
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-9327 http://linux.oracle.com/errata/ELSA-2025-9327.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: libblockdev-2.28-14.0.1.el9_6.i686.rpm libblockdev-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-btrfs-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-crypto-2.28-14.0.1.el9_6.i686.rpm libblockdev-crypto-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-dm-2.28-14.0.1.el9_6.i686.rpm libblockdev-dm-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-fs-2.28-14.0.1.el9_6.i686.rpm libblockdev-fs-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-kbd-2.28-14.0.1.el9_6.i686.rpm libblockdev-kbd-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-loop-2.28-14.0.1.el9_6.i686.rpm libblockdev-loop-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-lvm-2.28-14.0.1.el9_6.i686.rpm libblockdev-lvm-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-lvm-dbus-2.28-14.0.1.el9_6.i686.rpm libblockdev-lvm-dbus-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-mdraid-2.28-14.0.1.el9_6.i686.rpm libblockdev-mdraid-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-mpath-2.28-14.0.1.el9_6.i686.rpm libblockdev-mpath-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-nvdimm-2.28-14.0.1.el9_6.i686.rpm libblockdev-nvdimm-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-nvme-2.28-14.0.1.el9_6.i686.rpm libblockdev-nvme-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-part-2.28-14.0.1.el9_6.i686.rpm libblockdev-part-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-plugins-all-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-swap-2.28-14.0.1.el9_6.i686.rpm libblockdev-swap-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-tools-2.28-14.0.1.el9_6.x86_64.rpm libblockdev-utils-2.28-14.0.1.el9_6.i686.rpm libblockdev-utils-2.28-14.0.1.el9_6.x86_64.rpm python3-blockdev-2.28-14.0.1.el9_6.x86_64.rpm aarch64: libblockdev-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-btrfs-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-crypto-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-dm-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-fs-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-kbd-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-loop-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-lvm-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-lvm-dbus-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-mdraid-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-mpath-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-nvdimm-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-nvme-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-part-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-plugins-all-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-swap-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-tools-2.28-14.0.1.el9_6.aarch64.rpm libblockdev-utils-2.28-14.0.1.el9_6.aarch64.rpm python3-blockdev-2.28-14.0.1.el9_6.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/libblockdev-2.28-14.0.1.el9_6.src.rpm Related CVEs: CVE-2025-6019 Description of changes: [2.28-14.0.1] - enable btrfs support [Orabug: 30792917] [2.28-14] - Don't allow suid and dev set on fs resize (CVE-2025-6019) Resolves: RHEL-96038 _______________________________________________ El-errata mailing list
Jun 24, 2025
•Important
Oracle
89
security advisoryfedoracriticalFedora 41: FEDORA-2025-4f28b95d7e Critical Local Privilege Escalation Issue
Don't allow suid and dev set on fs resize (Thomas.Blume). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-4f28b95d7e 2025-06-21 02:10:24.663271+00:00 -------------------------------------------------------------------------------- Name : libblockdev Product : Fedora 41 Version : 3.2.2 Release : 1.fc41 URL : https://github.com/storaged-project/libblockdev Summary : A library for low-level manipulation with block devices Description : The libblockdev is a C library with GObject introspection support that can be used for doing low-level operations with block devices like setting up LVM, BTRFS, LUKS or MD RAID. The library uses plugins (LVM, BTRFS,...) and serves as a thin wrapper around its plugins' functionality. All the plugins, however, can be used as standalone libraries. One of the core principles of libblockdev is that it is stateless from the storage configuration's perspective (e.g. it has no information about VGs when creating an LV). -------------------------------------------------------------------------------- Update Information: Don't allow suid and dev set on fs resize (Thomas.Blume) -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 18 2025 Vojtech Trefny - 3.2.2-1 - Don't allow suid and dev set on fs resize (Thomas.Blume) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2373307 - libblockdev allegedly exploitable via the udisks daemon included by default on most Linux distributions, and allows an âallow_activeâ user to gain full root privileges (CVE-2025-6019) https://bugzilla.redhat.com/show_bug.cgi?id=2373307 [ 2 ] Bug #2373715 - CVE-2025-6019 libblockdev: LPE from allow_active to root in libblockdev via udisks [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2373715 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4f28b95d7e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Critical Security Alert: Fedora Update for libblockdev released. This patch fixes vulnerabilities that could grant full root access. Update is strongly advised.. libblockdev update, Fedora advisory, root privilege escalation, security update, pluggable block devices. . Severity: Critical. LinuxSecurity.com Team
Jun 21, 2025
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!