https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:05:33 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:3476 <p><strong>Affected:</strong> AlmaLinux:10: libudisks2, AlmaLinux:10: libudisks2-devel, AlmaLinux:10: udisks2, AlmaLinux:10: udisks2-iscsi, AlmaLinux:10: udisks2-lsm, AlmaLinux:10: udisks2-lvm2</p> <p>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.</p> <p>Security Fix(es):</p> <p>* udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104) * udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libudisks2, AlmaLinux:10: libudisks2-devel, AlmaLinux:10: udisks2, AlmaLinux:10: udisks2-iscsi, AlmaLinux:10: udisks2-lsm, AlmaLinux:10: udisks2-lvm2</p> <p>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.</p> <p>Security Fix(es):</p> <p>* udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104) * udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:3476 https://cve.radiocsirt.org/vuln/euvd-2026-277464 EUVD-2026-277464 https://cve.radiocsirt.org/vuln/euvd-2026-277464 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26104 <p>A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.</p> <p>A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-26104 https://cve.radiocsirt.org/vuln/ghsa-hjgq-ff5j-5v2m <p>A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.</p> <p>A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.</p> https://cve.radiocsirt.org/vuln/ghsa-hjgq-ff5j-5v2m https://cve.radiocsirt.org/vuln/opensuse-su-2026:10273-1 <p>libudisks2-0-2.11.0-2.1 on GA media</p> <p>libudisks2-0-2.11.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10273-1 https://cve.radiocsirt.org/vuln/rhsa-2026:5831 <p>udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API</p> <p>udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API</p> https://cve.radiocsirt.org/vuln/rhsa-2026:5831 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0554 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente &#34;udisks&#34; ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente &#34;udisks&#34; ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0554