https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:33:34.377399+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:3476 ALSA-2026:3476 — Important: udisks2 security update 2026-10-03T19:33:34.499408+00:00

Affected: AlmaLinux:10: libudisks2, AlmaLinux:10: libudisks2-devel, AlmaLinux:10: udisks2, AlmaLinux:10: udisks2-iscsi, AlmaLinux:10: udisks2-lsm, AlmaLinux:10: udisks2-lvm2

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.

Security Fix(es):

* udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104) * udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-277464 EUVD-2026-277464 2026-10-03T19:33:34.499514+00:00 EUVD-2026-277464 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26104 fkie_cve-2026-26104 2026-10-03T19:33:34.499538+00:00

A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.

 https://cve.radiocsirt.org/vuln/ghsa-hjgq-ff5j-5v2m GHSA-hjgq-ff5j-5v2m 2026-10-03T19:33:34.499582+00:00

A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10273-1 openSUSE-SU-2026:10273-1 — libudisks2-0-2.11.0-2.1 on GA media 2026-10-03T19:33:34.499615+00:00

libudisks2-0-2.11.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:5831 RHSA-2026:5831 — Red Hat Security Advisory: udisks2 security update 2026-10-03T19:33:34.499647+00:00

udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0554 WID-SEC-W-2026-0554 — Red Hat Enterprise Linux (udisks): Mehrere Schwachstellen 2026-10-03T19:33:34.499675+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente "udisks" ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.