22
New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions (thehackernews.com)
submitted 1 year ago by to c/linux@sh.itjust.works
6 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 year ago (3 children)

TLDR:

The new flaws are CVE-2025-6018 and CVE-2025-6019.

The first is a vulnerability in PAM. The second is in libblockdev.

The PAM vulnerability only affects SUSE Linux systems, other distros are not affected.

Vulnerable versions of libblockdev are 2.25-2 and 2.28-2, newer updates have it fixed.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 4 points 1 year ago (2 children)

    So, if you're using Arch, and you've run pacman -Syu within the past, I don't know, year, you're fine.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •