Vulnerabilities

TI-2026-21098 CVE-2026-26104 · GHSA-hjgq-ff5j-5v2m

Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

LOW 23

A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00082 Published 2026-02-25 Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862

TI-2026-21097 CVE-2026-26103 · GHSA-fw7p-cggr-9xm6

Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api

LOW 30

A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00082 Published 2026-02-25 Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862

Vulnerabilities

Filters

Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api