Vulnerabilities in PAM and libblockdev that allow for root access in the system
Qualys has identified a vulnerability (CVE-2025-6019) in the libblockdev library, allowing root access to the system through manipulation of the udisks background process. A prototype exploit has been demonstrated on Ubuntu, Debian, Fedora, and openSUSE Leap 15. The udisks process is used in nearly all Linux distributions and provides a D-Bus interface for performing storage operations, such as mounting and formatting. For [...]
