Race condition in libblockdev - CVE-2025-6019

Vulnerability identifier: #VU111385

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-6019

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition. A local user can exploit the race using the udisks daemon and execute arbitrary code with root privileges after certain manipulations with mounts 

libblockdev
Gentoo Linux
Arch Linux
SUSE Linux Enterprise Server 15 SP3
Debian Linux
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
Anolis OS
SUSE Enterprise Storage
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
Fedora
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
udisks2 (Ubuntu package)
libudisks2
libudisks2-devel
udisks2
udisks2-iscsi
udisks2-lsm
udisks2-lvm2
udisks2-doc
udisks2-debugsource
udisks2-debuginfo
udisks2-vdo
udisks2-zram
sys-fs/udisks
libblockdev (Ubuntu package)
libblockdev (Red Hat package)
libblockdev-part-devel
libblockdev-mpath
libblockdev-mpath-devel
libblockdev-nvdimm
libblockdev-nvdimm-devel
libblockdev-part
python2-blockdev
libblockdev-plugins-all
libblockdev-swap
libblockdev-swap-devel
libblockdev-utils
libblockdev-utils-devel
libblockdev-vdo
libblockdev-vdo-devel
libblockdev-mdraid
libblockdev-dm-devel
libblockdev-lvm-devel
libblockdev-lvm
libblockdev-loop-devel
libblockdev-loop
libblockdev-kbd-devel
libblockdev-kbd
libblockdev-fs-devel
libblockdev-fs
libblockdev-mdraid-devel
libblockdev-dm
libblockdev-devel
libblockdev-crypto-devel
libblockdev-crypto
libblockdev-btrfs-devel
libblockdev-btrfs
libblockdev
libbd_loop2
libblockdev-debugsource
libbd_utils2
libbd_swap2-debuginfo
libblockdev2-debuginfo
libbd_part2-debuginfo
libbd_crypto2
libbd_mdraid2
libblockdev2
libbd_loop2-debuginfo
libbd_mdraid2-debuginfo
libbd_swap2
libbd_utils2-debuginfo
libbd_fs2
libbd_part2
libblockdev-debuginfo
libbd_fs2-debuginfo
libbd_crypto2-debuginfo
python3-blockdev
libblockdev-tools
libbd_crypto-devel
libbd_btrfs2-debuginfo
libbd_lvm2
libbd_lvm2-debuginfo
libbd_part-devel
libbd_btrfs-devel
libbd_lvm-devel
libbd_dm2
libbd_vdo2-debuginfo
libbd_dm-devel
typelib-1_0-BlockDev-2_0
libbd_dm2-debuginfo
libbd_kbd2
libbd_fs-devel
libbd_kbd-devel
libbd_lvm-dbus-devel
libbd_mpath2
libbd_mpath2-debuginfo
python3-libblockdev
libbd_swap-devel
libbd_lvm-dbus2-debuginfo
libbd_btrfs2
libbd_lvm-dbus2
libbd_kbd2-debuginfo
libbd_vdo2
libbd_mdraid-devel
libbd_vdo-devel
libbd_utils-devel
libbd_mpath-devel
libbd_loop-devel
libblockdev (Debian package)
libblockdev-lvm-dbus
libblockdev-lvm-dbus-devel
libblockdev-smartmontools
libblockdev-smart-devel
libblockdev-smart
libblockdev-nvme-devel
libblockdev-nvme
sys-libs/libblockdev

Install updates from vendor's website.

libblockdev - addressed in versions 2.30-1, 3.2.2, 3.3.1
udisks2 (Ubuntu package) - addressed in versions 2.7.6-3ubuntu0.2+esm1, 2.8.4-1ubuntu2+esm1, 2.9.4-1ubuntu2.2, 2.10.1-6ubuntu1.2, 2.10.1-9ubuntu3.2, 2.10.1-11ubuntu2.2
libudisks2 - addressed in versions 2.9.0-16.0.3, 2.10.90-2
libudisks2-devel - addressed in versions 2.9.0-16.0.3, 2.10.90-2
udisks2 - addressed in versions 2.9.0-16.0.3, 2.10.90-2
udisks2-iscsi - addressed in versions 2.9.0-16.0.3, 2.10.90-2
udisks2-lsm - addressed in versions 2.9.0-16.0.3, 2.10.90-2
udisks2-lvm2 - addressed in versions 2.9.0-16.0.3, 2.10.90-2
udisks2-doc - update to 2.9.0-16.0.3
udisks2-lvm2 - update to 2.9.4-7
udisks2-lsm - update to 2.9.4-7
udisks2-debugsource - update to 2.9.4-7
udisks2-debuginfo - update to 2.9.4-7
libudisks2-devel - update to 2.9.4-7
libudisks2 - update to 2.9.4-7
udisks2 - update to 2.9.4-7
udisks2-vdo - update to 2.9.4-7
udisks2-zram - update to 2.9.4-7
sys-fs/udisks - update to 2.10.1-r4
udisks2 - addressed in versions 2.10.1-7.fc41, 2.10.90-3.fc42
libblockdev (Ubuntu package) - addressed in versions 2.16-2ubuntu0.1~esm1, 2.23-2ubuntu3+esm1, 2.26-1ubuntu0.1, 3.1.1-1ubuntu0.1, 3.1.1-2ubuntu0.1, 3.3.0-2ubuntu0.1
libblockdev (Red Hat package) - addressed in versions 2.18-5.el7_9.1, 2.25-12.el9_0, 2.28-7.el8_10, 3.2.0-4.el10_0
libblockdev-part-devel - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-mpath - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-mpath-devel - addressed in versions 2.18-6, 3.2.0-2
libblockdev-nvdimm - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-nvdimm-devel - addressed in versions 2.18-6, 3.2.0-2
libblockdev-part - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
python2-blockdev - update to 2.18-6
libblockdev-plugins-all - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-swap - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-swap-devel - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-utils - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-utils-devel - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-vdo - addressed in versions 2.18-6, 2.28-7
libblockdev-vdo-devel - addressed in versions 2.18-6, 2.28-7
libblockdev-mdraid - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-dm-devel - addressed in versions 2.18-6, 3.2.0-2
libblockdev-lvm-devel - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-lvm - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-loop-devel - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-loop - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-kbd-devel - update to 2.18-6
libblockdev-kbd - addressed in versions 2.18-6, 2.28-7
libblockdev-fs-devel - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-fs - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-mdraid-devel - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-dm - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-devel - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-crypto-devel - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-crypto - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libblockdev-btrfs-devel - update to 2.18-6
libblockdev-btrfs - update to 2.18-6
libblockdev - addressed in versions 2.18-6, 2.28-7, 3.2.0-2
libbd_loop2 - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libblockdev-debugsource - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_utils2 - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_swap2-debuginfo - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libblockdev2-debuginfo - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_part2-debuginfo - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_crypto2 - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_mdraid2 - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libblockdev2 - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_loop2-debuginfo - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libblockdev - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_mdraid2-debuginfo - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_swap2 - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_utils2-debuginfo - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_fs2 - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_part2 - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libblockdev-debuginfo - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_fs2-debuginfo - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libbd_crypto2-debuginfo - addressed in versions 2.22-150200.3.3.1, 2.26-150400.3.5.1
libblockdev - update to 2.26-5
libblockdev-debuginfo - update to 2.26-5
libblockdev-debugsource - update to 2.26-5
libblockdev-devel - update to 2.26-5
python3-blockdev - update to 2.26-5
libblockdev-tools - update to 2.26-5
libbd_crypto-devel - update to 2.26-150400.3.5.1
libbd_btrfs2-debuginfo - update to 2.26-150400.3.5.1
libbd_lvm2 - update to 2.26-150400.3.5.1
libbd_lvm2-debuginfo - update to 2.26-150400.3.5.1
libbd_part-devel - update to 2.26-150400.3.5.1
libbd_btrfs-devel - update to 2.26-150400.3.5.1
libbd_lvm-devel - update to 2.26-150400.3.5.1
libbd_dm2 - update to 2.26-150400.3.5.1
libbd_vdo2-debuginfo - update to 2.26-150400.3.5.1
libbd_dm-devel - update to 2.26-150400.3.5.1
typelib-1_0-BlockDev-2_0 - update to 2.26-150400.3.5.1
libbd_dm2-debuginfo - update to 2.26-150400.3.5.1
libbd_kbd2 - update to 2.26-150400.3.5.1
libbd_fs-devel - update to 2.26-150400.3.5.1
libbd_kbd-devel - update to 2.26-150400.3.5.1
libbd_lvm-dbus-devel - update to 2.26-150400.3.5.1
libbd_mpath2 - update to 2.26-150400.3.5.1
libbd_mpath2-debuginfo - update to 2.26-150400.3.5.1
python3-libblockdev - update to 2.26-150400.3.5.1
libbd_swap-devel - update to 2.26-150400.3.5.1
libbd_lvm-dbus2-debuginfo - update to 2.26-150400.3.5.1
libbd_btrfs2 - update to 2.26-150400.3.5.1
libbd_lvm-dbus2 - update to 2.26-150400.3.5.1
libbd_kbd2-debuginfo - update to 2.26-150400.3.5.1
libbd_vdo2 - update to 2.26-150400.3.5.1
libbd_mdraid-devel - update to 2.26-150400.3.5.1
libblockdev-devel - update to 2.26-150400.3.5.1
libbd_vdo-devel - update to 2.26-150400.3.5.1
libbd_utils-devel - update to 2.26-150400.3.5.1
libbd_mpath-devel - update to 2.26-150400.3.5.1
libbd_loop-devel - update to 2.26-150400.3.5.1
libblockdev (Debian package) - update to 2.28-2+deb12u1
python3-blockdev - addressed in versions 2.28-7, 3.2.0-2
libblockdev-lvm-dbus - addressed in versions 2.28-7, 3.2.0-2
libblockdev-lvm-dbus-devel - update to 3.2.0-2
libblockdev-tools - update to 3.2.0-2
libblockdev-smartmontools - update to 3.2.0-2
libblockdev-smart-devel - update to 3.2.0-2
libblockdev-smart - update to 3.2.0-2
libblockdev-nvme-devel - update to 3.2.0-2
libblockdev-nvme - update to 3.2.0-2
libblockdev - addressed in versions 3.2.2-1.fc41, 3.3.1-1.fc42
sys-libs/libblockdev - update to 3.3.0
libblockdev - update to 3.3.1-1

• Exploit #12447 - CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit () (February 27, 2026)
• Exploit #12445 - opensuse-leap-privesc-exploit (Privilege escalation exploit chain (CVE-2025-6018 + CVE-2025-6019) for openSUSE Leap 15.6) (February 27, 2026)
• Exploit #12408 - Exploit-Chain-CVE-2025-6018-6019 (February 13, 2026)
• Exploit #12403 - CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit (February 13, 2026)
• Exploit #11933 - CVE-2025-6019 (September 5, 2025)
• Exploit #11882 - PAM-UDisks-PrivEsc-Metasploit (Metasploit modules for the PAM Environment and Udisks PE exploits.) (August 22, 2025)
• Exploit #11762 - PAM-UDisks-PrivEsc-Metasploit (Metasploit modules for the PAM Environment and Udisks PE exploits.) (July 3, 2025)
• Exploit #11753 - CVE-2025-6019_Poc (Exploit for CVE-2025-6019) (July 3, 2025)
• Exploit #11666 - CVE-2025-6019 (June 20, 2025)
• Exploit #11665 - CVE-2025-6019-exploit (June 20, 2025)
• Exploit #11654 - CVE-2025-6019: LPE from allow_active to root in libblockdev via udisks (June 19, 2025)

• https://www.openwall.com/lists/oss-security/2025/06/17/4

• Privilege escalation in libblockdev
• Ubuntu update for udisks2
• Ubuntu update for libblockdev
• Ubuntu update for udisks2
• Ubuntu update for libblockdev
• Debian update for libblockdev
• Fedora 42 update for libblockdev
• Fedora 41 update for libblockdev
• Fedora 42 update for udisks2
• SUSE update for libblockdev
• SUSE update for libblockdev
• Arch Linux update for libblockdev
• Fedora 41 update for udisks2
• Anolis OS update for udisks2
• Anolis OS update for libblockdev
• openEuler update for udisks2
• openEuler update for libblockdev
• Red Hat Enterprise Linux 9 update for libblockdev
• Red Hat Enterprise Linux 10 update for libblockdev
• Red Hat Enterprise Linux 8 update for libblockdev
• Gentoo update for UDisks, libblockdev
• Red Hat Enterprise Linux 7Extended Life Cycle Support update for libblockdev
• Anolis OS update for libblockdev and udisks2
• Anolis OS update for libblockdev