Red Hat Security Advisory: libblockdev security update

Fixed packages 37

Vulnerabilities 1

• High 7.0
  CVE-2025-6019 Public exploit

  Libblockdev: lpe from allow_active to root in libblockdev via udisks

  A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisk…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux
  Jun 19, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2370051
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9326.json
• report
  https://access.redhat.com/security/cve/CVE-2025-6019
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-6019
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-6019
• article
  https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt