Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente "udisks" ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.
Product
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Vulnerabilities 2
-
High 7.1
Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api
A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to over…
-
Medium 5.5
Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api
A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform…
Revision history
-
#4
Neue Updates von Red Hat aufgenommen
-
#3
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#2
Neue Updates von Oracle Linux aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory vom 2026-03-01
https://access.redhat.com/errata/RHSA-2026:3476
-
Oracle Linux Security Advisory ELSA-2026-3476 vom 2026-03-02
https://linux.oracle.com/errata/ELSA-2026-3476.html
-
Rocky Linux Security Advisory RLSA-2026:3476 vom 2026-03-05
https://errata.build.resf.org/RLSA-2026:3476
-
Red Hat Security Advisory RHSA-2026:5831 vom 2026-03-25
https://access.redhat.com/errata/RHSA-2026:5831