https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:53:27 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:3476 <p><strong>Affected:</strong> AlmaLinux:10: libudisks2, AlmaLinux:10: libudisks2-devel, AlmaLinux:10: udisks2, AlmaLinux:10: udisks2-iscsi, AlmaLinux:10: udisks2-lsm, AlmaLinux:10: udisks2-lvm2</p> <p>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.</p> <p>Security Fix(es):</p> <p>* udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104) * udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libudisks2, AlmaLinux:10: libudisks2-devel, AlmaLinux:10: udisks2, AlmaLinux:10: udisks2-iscsi, AlmaLinux:10: udisks2-lsm, AlmaLinux:10: udisks2-lvm2</p> <p>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.</p> <p>Security Fix(es):</p> <p>* udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104) * udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:3476 https://cve.radiocsirt.org/vuln/euvd-2026-337444 EUVD-2026-337444 https://cve.radiocsirt.org/vuln/euvd-2026-337444 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26103 <p>A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.</p> <p>A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-26103 https://cve.radiocsirt.org/vuln/ghsa-fw7p-cggr-9xm6 <p>A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.</p> <p>A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.</p> https://cve.radiocsirt.org/vuln/ghsa-fw7p-cggr-9xm6 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10273-1 <p>libudisks2-0-2.11.0-2.1 on GA media</p> <p>libudisks2-0-2.11.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10273-1 https://cve.radiocsirt.org/vuln/rhsa-2026:5831 <p>udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API</p> <p>udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API</p> https://cve.radiocsirt.org/vuln/rhsa-2026:5831 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0554 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente &#34;udisks&#34; ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente &#34;udisks&#34; ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0554