Red Hat Security AdvisoryRHSA-2026:3476
udisks2 security update
Released 2026-03-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) libudisks2-2.10.90-6.el10_1.1, udisks2-2.10.90-6.el10_1.1, udisks2-iscsi-2.10.90-6.el10_1.1 +2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libudisks2-devel-2.10.90-6.el10_1.1
Fixes 2 records
Priority LOW 30
A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00082 · Published 2026-02-25 · Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862
Priority LOW 23
A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00082 · Published 2026-02-25 · Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862
