Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | libudisks2 | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | libudisks2-debuginfo | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | libudisks2-devel | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | udisks2 | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | udisks2-debuginfo | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | udisks2-debugsource | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | udisks2-iscsi | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | udisks2-iscsi-debuginfo | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | udisks2-lsm | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | udisks2-lsm-debuginfo | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | udisks2-lvm2 | 0:2.10.90-5.el10_0.2 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | udisks2-lvm2-debuginfo | 0:2.10.90-5.el10_0.2 |
Vulnerabilities 2
-
High 7.1
Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api
A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to over…
-
Medium 5.5
Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api
A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2433717
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2433719
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5831.json
-
report
https://access.redhat.com/security/cve/CVE-2026-26103
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-26103
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-26103
-
article
https://github.com/storaged-project/udisks/security/advisories/GHSA-c75h-phf8-ccjm
-
report
https://access.redhat.com/security/cve/CVE-2026-26104
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-26104
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-26104
-
article
https://github.com/storaged-project/udisks/security/advisories/GHSA-fcvx-497g-6xmw