Linux systems face critical local privilege escalation threats via CVE-2025-6018/6019 flaws—users must patch now.
  • DeltaWingDragon@sh.itjust.works
    3·
    17 days ago

    TLDR:

    The new flaws are CVE-2025-6018 and CVE-2025-6019.

    The first is a vulnerability in PAM. The second is in libblockdev.

    The PAM vulnerability only affects SUSE Linux systems, other distros are not affected.

    Vulnerable versions of libblockdev are 2.25-2 and 2.28-2, newer updates have it fixed.

    • Ŝan@piefed.zipEnglish
      4·
      17 days ago

      So, if you’re using Arch, and you’ve run pacman -Syu within the past, I don’t know, year, you’re fine.

      • Tyoda@lemm.ee
        4·
        17 days ago

        well I ran it yesterday but I’ll run it again just to be safe you know

        • Sturgist@lemmy.ca
          3·
          17 days ago

          I run Garuda, an Arch based distro, wife calls it Update Simulator: OS Edition