Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02044-1

Опубликовано: 20 июн. 2025
Источник: suse-cvrf

Описание

Security update for libblockdev

This update for libblockdev fixes the following issues:

  • CVE-2025-6019: Suppress privilege escalation during xfs fs resize (bsc#1243285).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise Micro 5.3
libbd_btrfs2-2.26-150400.3.5.1
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise Micro 5.4
libbd_btrfs2-2.26-150400.3.5.1
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise Micro 5.5
libbd_btrfs2-2.26-150400.3.5.1
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6
libbd_btrfs2-2.26-150400.3.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
libbd_btrfs2-2.26-150400.3.5.1
SUSE Linux Enterprise Server 15 SP4-LTSS
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise Server 15 SP5-LTSS
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Manager Proxy 4.3
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
SUSE Manager Server 4.3
libbd_crypto2-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
openSUSE Leap 15.6
libbd_btrfs-devel-2.26-150400.3.5.1
libbd_btrfs2-2.26-150400.3.5.1
libbd_crypto-devel-2.26-150400.3.5.1
libbd_crypto2-2.26-150400.3.5.1
libbd_dm-devel-2.26-150400.3.5.1
libbd_dm2-2.26-150400.3.5.1
libbd_fs-devel-2.26-150400.3.5.1
libbd_fs2-2.26-150400.3.5.1
libbd_kbd-devel-2.26-150400.3.5.1
libbd_kbd2-2.26-150400.3.5.1
libbd_loop-devel-2.26-150400.3.5.1
libbd_loop2-2.26-150400.3.5.1
libbd_lvm-dbus-devel-2.26-150400.3.5.1
libbd_lvm-dbus2-2.26-150400.3.5.1
libbd_lvm-devel-2.26-150400.3.5.1
libbd_lvm2-2.26-150400.3.5.1
libbd_mdraid-devel-2.26-150400.3.5.1
libbd_mdraid2-2.26-150400.3.5.1
libbd_mpath-devel-2.26-150400.3.5.1
libbd_mpath2-2.26-150400.3.5.1
libbd_part-devel-2.26-150400.3.5.1
libbd_part2-2.26-150400.3.5.1
libbd_swap-devel-2.26-150400.3.5.1
libbd_swap2-2.26-150400.3.5.1
libbd_utils-devel-2.26-150400.3.5.1
libbd_utils2-2.26-150400.3.5.1
libbd_vdo-devel-2.26-150400.3.5.1
libbd_vdo2-2.26-150400.3.5.1
libblockdev-2.26-150400.3.5.1
libblockdev-devel-2.26-150400.3.5.1
libblockdev2-2.26-150400.3.5.1
python3-libblockdev-2.26-150400.3.5.1
typelib-1_0-BlockDev-2_0-2.26-150400.3.5.1

Ссылки

Описание

A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. Normally, udisks mounts user-provided filesystem images with security flags like nosuid and nodev to prevent privilege escalation. However, a local attacker can create a specially crafted XFS image containing a SUID-root shell, then trick udisks into resizing it. This mounts their malicious filesystem with root privileges, allowing them to execute their SUID-root shell and gain complete control of the system.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libbd_crypto2-2.26-150400.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libbd_fs2-2.26-150400.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libbd_loop2-2.26-150400.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libbd_lvm2-2.26-150400.3.5.1
Ссылки