Summary
[2.9.0-16.1]
- udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109408)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libudisks2 | 0:2.9.0-16.el8_10.1 |
| Oracle Linux · 8 | libudisks2-devel | 0:2.9.0-16.el8_10.1 |
| Oracle Linux · 8 | udisks2 | 0:2.9.0-16.el8_10.1 |
| Oracle Linux · 8 | udisks2-iscsi | 0:2.9.0-16.el8_10.1 |
| Oracle Linux · 8 | udisks2-lsm | 0:2.9.0-16.el8_10.1 |
| Oracle Linux · 8 | udisks2-lvm2 | 0:2.9.0-16.el8_10.1 |
Vulnerabilities 1
-
High 8.5CVE-2025-8067 Public exploit
Udisks: out-of-bounds read in udisks daemon
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this ha…