Home > Vulnerability Database > CVE-2025-6019

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2025-6019

Good to know:

Date: June 19, 2025

LPE from allow_active to root in libblockdev via udisks

Severity Score

7.0

Related Resources (23)

Url: https://lists.debian.org/debian-lts-announce/2025/06/msg00018.html

Url: http://www.openwall.com/lists/oss-security/2025/06/17/6

Url: https://news.ycombinator.com/item?id=44325861

Url: https://access.redhat.com/errata/RHSA-2025:9320

Url: https://access.redhat.com/errata/RHSA-2025:9322

Url: https://access.redhat.com/errata/RHSA-2025:9321

Url: https://access.redhat.com/errata/RHSA-2025:9324

Url: https://access.redhat.com/errata/RHSA-2025:9323

Url: https://access.redhat.com/errata/RHSA-2025:9326

Url: https://access.redhat.com/errata/RHSA-2025:9325

Url: https://nvd.nist.gov/vuln/detail/CVE-2025-6019

Url: https://access.redhat.com/errata/RHSA-2025:9328

Url: https://access.redhat.com/errata/RHSA-2025:9878

Url: https://access.redhat.com/errata/RHSA-2025:9327

Url: https://www.bleepingcomputer.com/news/linux/new-linux-udisks-flaw-lets-attackers-get-root-on-major-linux-distros/

Url: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt

Url: https://bugzilla.redhat.com/show_bug.cgi?id=2370051

Url: https://access.redhat.com/errata/RHSA-2025:10796

Url: https://security-tracker.debian.org/tracker/CVE-2025-6019

Url: https://access.redhat.com/security/cve/CVE-2025-6019

Url: http://www.openwall.com/lists/oss-security/2025/06/17/5

Url: http://www.openwall.com/lists/oss-security/2025/06/18/1

Url: https://www.mend.io/vulnerability-database/CVE-2025-6019

Severity Score

7.0

Weakness Type (CWE)

Improper Privilege Management

CWE-269

Execution with Unnecessary Privileges

CWE-250

Top Fix

Upgrade Version

Upgrade to version https://github.com/storaged-project/libblockdev.git - 3.3.1

CVSS v3.1

Base Score:	7.0
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Do you need more information?

Contact Us