Summary
[2.8.4-1.0.1]
- Fix index underflow in LoopSetup (CVE-2025-8067) [Orabug: 38444282]
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libudisks2 | 0:2.8.4-1.0.1.el7 |
| Oracle Linux · 7 | libudisks2-devel | 0:2.8.4-1.0.1.el7 |
| Oracle Linux · 7 | udisks2 | 0:2.8.4-1.0.1.el7 |
| Oracle Linux · 7 | udisks2-iscsi | 0:2.8.4-1.0.1.el7 |
| Oracle Linux · 7 | udisks2-lsm | 0:2.8.4-1.0.1.el7 |
| Oracle Linux · 7 | udisks2-lvm2 | 0:2.8.4-1.0.1.el7 |
Vulnerabilities 1
-
High 8.5CVE-2025-8067 Public exploit
Udisks: out-of-bounds read in udisks daemon
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this ha…