A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade udisks2-lsmUpgrade udisks2-debugsourceUpgrade libudisks2Upgrade udisks2-lvm2Upgrade udisks2Upgrade udisks2-debuginfoUpgrade libudisks2-debuginfoUpgrade libudisks2-develUpgrade udisks2-lsm-debuginfoUpgrade udisks2-lvm2-debuginfo | Sep 1, 2026 | Aug 6, 2026 |
| Debian | — | Upgrade udisks2 | Aug 9, 2026 | Aug 9, 2026 |
| Redhat_linux | — | Upgrade libudisks2Upgrade udisks2-debugsourceUpgrade udisks2-lvm2Upgrade udisks2-iscsiUpgrade udisks2-iscsi-debuginfoUpgrade udisks2Upgrade udisks2-lvm2-debuginfoUpgrade libudisks2-develUpgrade libudisks2-debuginfoUpgrade udisks2-lsmUpgrade udisks2-lsm-debuginfoUpgrade udisks2-debuginfo | Aug 13, 2026 | Aug 6, 2026 |
| Rocky_linux | — | Upgrade udisks2-debuginfoUpgrade libudisks2Upgrade udisks2-iscsi-debuginfoUpgrade libudisks2-debuginfoUpgrade udisks2Upgrade udisks2-lvm2-debuginfoUpgrade udisks2-lvm2Upgrade libudisks2-develUpgrade udisks2-debugsourceUpgrade udisks2-lsmUpgrade udisks2-iscsiUpgrade udisks2-lsm-debuginfo | Aug 14, 2026 | Aug 12, 2026 |
| Ubuntu | — | Upgrade udisks2Upgrade libudisks2-0 | Aug 31, 2026 | Aug 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub