EulerOS 2.0 SP12 : udisks2 (EulerOS-SA-2025-2343)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the...

EulerOS 2.0 SP13 : libblockdev (EulerOS-SA-2025-2266)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

EulerOS 2.0 SP13 : libblockdev (EulerOS-SA-2025-2298)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

TencentOS Server 2: udisks2 (TSSA-2025:0804)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0804 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

EulerOS 2.0 SP11 : libblockdev (EulerOS-SA-2025-2200)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

EulerOS 2.0 SP11 : udisks2 (EulerOS-SA-2025-2249)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

RLSA-2025:15018 Important: udisks2 security update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks: Out-of-bounds read in UDisks Daemon CVE-2025-8067 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...

udisks2 security update

An update is available for udisks2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Udisks project provides a daemon, tools, and libraries to access and...

VulnCheck KEV: CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

AlmaLinux 10 : libblockdev (ALSA-2025:9328)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9328 advisory. libblockdev: LPE from allowactive to root in libblockdev via udisks CVE-2025-6019 Tenable has extracted the preceding description block directly from the AlmaLinu...

ROS-20251008-10

A vulnerability in the fdindex function of the Udisks storage device query and management program is related to a reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to escalate their privileges and cause a denial of service...

EUVD-2014-0109

Malware in sbrugna...

EUVD-2010-1180

Malware in sbrugna...

EUVD-2018-9091

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libblockdev (UTSA-2025-018720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-018720 advisory. A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the allowactive setting in Polkit permits a physically present user to take certa...

Unity Linux 20.1070a Security Update: udisks2 (UTSA-2025-987420)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987420 advisory. A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libblockdev (UTSA-2025-177310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-177310 advisory. A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the allowactive setting in Polkit permits a physically present user to take certa...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: udisks2 (UTSA-2025-587571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-587571 advisory. A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the allowactive setting in Polkit permits a physically present user to take certa...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: udisks2 (UTSA-2025-984808)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984808 advisory. A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the allowactive setting in Polkit permits a physically present user to take certa...

RLSA-2025:9327 Important: libblockdev security update

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Security Fixes: libblockdev: LPE from allowactive ...