CVE-2026-26104

CVE-2026-26104 · Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.

CVSS 5.5 · Mittel · EPSS 0,1% · Korrektur verfügbar

Veröffentlicht

2026-02-25T10:51:15.204Z

Aktualisiert

2026-03-25T18:52:14.488Z

Technologie-Stack: system

Prüfen Sie Ihren Server →