Summary
The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.
Security Fix(es):
* udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | libudisks2 | 2.10.90-5.el10_0.1 |
| AlmaLinux · 10 | libudisks2-devel | 2.10.90-5.el10_0.1 |
| AlmaLinux · 10 | udisks2 | 2.10.90-5.el10_0.1 |
| AlmaLinux · 10 | udisks2-iscsi | 2.10.90-5.el10_0.1 |
| AlmaLinux · 10 | udisks2-lsm | 2.10.90-5.el10_0.1 |
| AlmaLinux · 10 | udisks2-lvm2 | 2.10.90-5.el10_0.1 |
Vulnerabilities 1
-
High 8.5CVE-2025-8067 Public exploit
Udisks: out-of-bounds read in udisks daemon
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this ha…