Linux系统libblockdev库本地提权漏洞（NVDB-CNVDB-2025637145/CVE-2025-6019）
拥有allow_active用户组权限的攻击者可通过udisks服务利用该漏洞提升至root权限，进而控制系统，Ubuntu、Debian、Fedora、openSUSE Leap 15 等默认安装udisks服务的Linux发生版均受此影响。

ubunut22.04

• 添加ubuntu官方源

cat >>/etc/apt/source.list<<'EOF'
deb http://archive.ubuntu.com/ubuntu jammy main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu jammy-updates main restricted universe multiverse
EOF
apt update -y

• 离线下载包

mkdir libblockdev2  && cd  libblockdev2
apt download libblockdev2 libblockdev-utils2 libblockdev-crypto2 libblockdev-part-err2 \
libblockdev-part2 libblockdev-fs2 libblockdev-btrfs2 libblockdev-lvm2 libblockdev-mdraid2 \
libblockdev-part-err2  libblockdev-btrfs2 libbytesize1 libbytesize-common libblockdev-loop2 libblockdev-swap2

• 安装

dpki -i ./*
systemctl restart udisks2.service