Vulnerabilities

TI-2026-21098 CVE-2026-26104 · GHSA-hjgq-ff5j-5v2m

Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

LOW 23

A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00082 Published 2026-02-25 Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862

TI-2026-21097 CVE-2026-26103 · GHSA-fw7p-cggr-9xm6

Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api

LOW 30

A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00082 Published 2026-02-25 Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862

TI-2018-12362 CVE-2018-17336 · GHSA-wc77-2q7w-jfm4

UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing…

LOW 35

UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspec…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00622 Published 2018-09-22 Partial fix CWE-134

TI-2014-00004 CVE-2014-0004 · GHSA-jqwr-w7rw-fwpf

Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local…

LOW 31

Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.0043 Published 2014-03-11 Fixed CWE-119

TI-2010-01106 CVE-2010-1149 · GHSA-5hh6-fqvm-v5v8

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS…

LOW 11

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to udev even for a crypt UDISKS_DM_TARGETS_TYPE, which allows local users to discover encryption keys by (1) running a certai…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00269 Published 2010-04-12 No fix listed CWE-200