Summary
The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.
Security Fix(es):
* udisks2: udisks2: Local Privilege Escalation via as-user option spoofing (CVE-2026-7867)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | libudisks2 | 2.11.0-2.el10_2.1.alma.2 |
| AlmaLinux · 10 | libudisks2-devel | 2.11.0-2.el10_2.1.alma.2 |
| AlmaLinux · 10 | udisks2 | 2.11.0-2.el10_2.1.alma.2 |
| AlmaLinux · 10 | udisks2-iscsi | 2.11.0-2.el10_2.1.alma.2 |
| AlmaLinux · 10 | udisks2-lsm | 2.11.0-2.el10_2.1.alma.2 |
| AlmaLinux · 10 | udisks2-lvm2 | 2.11.0-2.el10_2.1.alma.2 |
Vulnerabilities 1
-
High 7.8CVE-2026-7867 Public exploit
Udisks2: udisks2: local privilege escalation via as-user option spoofing
A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user…