Summary
It was discovered that UDisks did not correctly validate the caller
identity when handling the as-user option in the
org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. A local attacker
with an active console session could possibly use this issue to mount
filesystems on behalf of arbitrary users, including privileged accounts,
leading to local privilege escalation.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | udisks2 | 2.10.1-6ubuntu1.5 |
| Ubuntu · 26.04 LTS 26.04:LTS | udisks2 | 2.10.91-1ubuntu2.1 |
Vulnerabilities 1
-
High 7.8CVE-2026-7867 Public exploit
Udisks2: udisks2: local privilege escalation via as-user option spoofing
A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user…
References
-
report
https://ubuntu.com/security/CVE-2026-7867