https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:37:24.750711+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:3476 ALSA-2026:3476 — Important: udisks2 security update 2026-10-03T10:37:24.863023+00:00

Affected: AlmaLinux:10: libudisks2, AlmaLinux:10: libudisks2-devel, AlmaLinux:10: udisks2, AlmaLinux:10: udisks2-iscsi, AlmaLinux:10: udisks2-lsm, AlmaLinux:10: udisks2-lvm2

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.

Security Fix(es):

* udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104) * udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-337444 EUVD-2026-337444 2026-10-03T10:37:24.863090+00:00 EUVD-2026-337444 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26103 fkie_cve-2026-26103 2026-10-03T10:37:24.863107+00:00

A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.

 https://cve.radiocsirt.org/vuln/ghsa-fw7p-cggr-9xm6 GHSA-fw7p-cggr-9xm6 2026-10-03T10:37:24.863132+00:00

A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10273-1 openSUSE-SU-2026:10273-1 — libudisks2-0-2.11.0-2.1 on GA media 2026-10-03T10:37:24.863147+00:00

libudisks2-0-2.11.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:5831 RHSA-2026:5831 — Red Hat Security Advisory: udisks2 security update 2026-10-03T10:37:24.863164+00:00

udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0554 WID-SEC-W-2026-0554 — Red Hat Enterprise Linux (udisks): Mehrere Schwachstellen 2026-10-03T10:37:24.863182+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente "udisks" ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.