gir1.2-blockdev-3.0: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev.Generally, the "allow_active" setting in Po...

A Local Privilege Escalation (LPE) vulnerability was found in libblockdev.Generally, the "allow_active" setting in Polkit permits a physicallypresent user to take certain actions based on the session type. Due to theway libblockdev interacts with the udisks daemon, an "allow_active" user ona system may be able escalate to full root privileges on the target host.Normally, udisks mounts user-provided filesystem images with security flagslike nosuid and nodev to prevent privilege escalation. However, a localattacker can create a specially crafted XFS image containing a SUID-rootshell, then trick udisks into resizing it. This mounts their maliciousfilesystem with root privileges, allowing them to execute their SUID-rootshell and gain complete control of the system.

Where it's fixed