ALSA-2025:A004

See a problem?
Please try reporting it to the source first.
Source
https://errata.almalinux.org/8/ALSA-2025-A004.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:A004.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2025:A004
Related
Published
2025-06-20T00:00:00Z
Modified
2025-06-20T14:58:30Z
Summary
Important: libblockdev security update
Details

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API).

Security Fix(es):

  • libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / libblockdev

Package

Name
libblockdev
Purl
pkg:rpm/almalinux/libblockdev

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-crypto

Package

Name
libblockdev-crypto
Purl
pkg:rpm/almalinux/libblockdev-crypto

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-crypto-devel

Package

Name
libblockdev-crypto-devel
Purl
pkg:rpm/almalinux/libblockdev-crypto-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-devel

Package

Name
libblockdev-devel
Purl
pkg:rpm/almalinux/libblockdev-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-dm

Package

Name
libblockdev-dm
Purl
pkg:rpm/almalinux/libblockdev-dm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-dm-devel

Package

Name
libblockdev-dm-devel
Purl
pkg:rpm/almalinux/libblockdev-dm-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-fs

Package

Name
libblockdev-fs
Purl
pkg:rpm/almalinux/libblockdev-fs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-fs-devel

Package

Name
libblockdev-fs-devel
Purl
pkg:rpm/almalinux/libblockdev-fs-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-kbd

Package

Name
libblockdev-kbd
Purl
pkg:rpm/almalinux/libblockdev-kbd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-kbd-devel

Package

Name
libblockdev-kbd-devel
Purl
pkg:rpm/almalinux/libblockdev-kbd-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-loop

Package

Name
libblockdev-loop
Purl
pkg:rpm/almalinux/libblockdev-loop

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-loop-devel

Package

Name
libblockdev-loop-devel
Purl
pkg:rpm/almalinux/libblockdev-loop-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-lvm

Package

Name
libblockdev-lvm
Purl
pkg:rpm/almalinux/libblockdev-lvm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-lvm-dbus

Package

Name
libblockdev-lvm-dbus
Purl
pkg:rpm/almalinux/libblockdev-lvm-dbus

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-lvm-dbus-devel

Package

Name
libblockdev-lvm-dbus-devel
Purl
pkg:rpm/almalinux/libblockdev-lvm-dbus-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-lvm-devel

Package

Name
libblockdev-lvm-devel
Purl
pkg:rpm/almalinux/libblockdev-lvm-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-mdraid

Package

Name
libblockdev-mdraid
Purl
pkg:rpm/almalinux/libblockdev-mdraid

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-mdraid-devel

Package

Name
libblockdev-mdraid-devel
Purl
pkg:rpm/almalinux/libblockdev-mdraid-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-mpath

Package

Name
libblockdev-mpath
Purl
pkg:rpm/almalinux/libblockdev-mpath

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-mpath-devel

Package

Name
libblockdev-mpath-devel
Purl
pkg:rpm/almalinux/libblockdev-mpath-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-nvdimm

Package

Name
libblockdev-nvdimm
Purl
pkg:rpm/almalinux/libblockdev-nvdimm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-nvdimm-devel

Package

Name
libblockdev-nvdimm-devel
Purl
pkg:rpm/almalinux/libblockdev-nvdimm-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-part

Package

Name
libblockdev-part
Purl
pkg:rpm/almalinux/libblockdev-part

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-part-devel

Package

Name
libblockdev-part-devel
Purl
pkg:rpm/almalinux/libblockdev-part-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-plugins-all

Package

Name
libblockdev-plugins-all
Purl
pkg:rpm/almalinux/libblockdev-plugins-all

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-s390

Package

Name
libblockdev-s390
Purl
pkg:rpm/almalinux/libblockdev-s390

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-s390-devel

Package

Name
libblockdev-s390-devel
Purl
pkg:rpm/almalinux/libblockdev-s390-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-swap

Package

Name
libblockdev-swap
Purl
pkg:rpm/almalinux/libblockdev-swap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-swap-devel

Package

Name
libblockdev-swap-devel
Purl
pkg:rpm/almalinux/libblockdev-swap-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-tools

Package

Name
libblockdev-tools
Purl
pkg:rpm/almalinux/libblockdev-tools

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-utils

Package

Name
libblockdev-utils
Purl
pkg:rpm/almalinux/libblockdev-utils

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-utils-devel

Package

Name
libblockdev-utils-devel
Purl
pkg:rpm/almalinux/libblockdev-utils-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-vdo

Package

Name
libblockdev-vdo
Purl
pkg:rpm/almalinux/libblockdev-vdo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / libblockdev-vdo-devel

Package

Name
libblockdev-vdo-devel
Purl
pkg:rpm/almalinux/libblockdev-vdo-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1

AlmaLinux:8 / python3-blockdev

Package

Name
python3-blockdev
Purl
pkg:rpm/almalinux/python3-blockdev

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.28-6.el8.alma.1