Red Hat Security AdvisoryRHSA-2026:5831
udisks2 security update
Released 2026-03-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) libudisks2-2.10.90-5.el10_0.2, udisks2-2.10.90-5.el10_0.2, udisks2-iscsi-2.10.90-5.el10_0.2 +2
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) libudisks2-devel-2.10.90-5.el10_0.2
Fixes 2 records
Priority LOW 30
A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00082 · Published 2026-02-25 · Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862
Priority LOW 23
A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00082 · Published 2026-02-25 · Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862
