Linux · Security advisory · June 20, 2025

ALSA-2025:A005: Security update for 16 packages

ALSA-2025:A005, released June 20, 2025, fixes 1 CVE across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0048
41st percentile

Fixed package versions

ProductReleaseFixed in
libblockdev-crypto-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-dm-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-fs-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-kbd-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-loop-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-lvm-dbus-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-lvm-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-mdraid-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-mpath-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-nvdimm-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-nvme-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-part-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-s390-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-swap-develalmalinux 92.28-13.el9_6.alma.1
libblockdev-utils-develalmalinux 92.28-13.el9_6.alma.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-6019 gir1.2-blockdev-3.0: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev.Generally, the "allow_active" setting in Po... 7.0 0.0048 None reported
Showing 1 to 1 of 1 1