Linux UDisks Daemon Vulnerability Lets Attackers Access Privileged User Files
Red Hat has identified a critical security vulnerability in the Udisks daemon, which can be exploited by unprivileged users to access files owned by privileged accounts through an out-of-bounds read vulnerability.
Red Hat has identified a critical security vulnerability in the Udisks daemon, which can be exploited by unprivileged users to access files owned by privileged accounts through an out-of-bounds read vulnerability.
The vulnerability, designated as CVE-2025-8067, was publicly disclosed on Thu, Aug 28, 2025. It carries an Important severity rating according to Red Hat Product Security.
The Udisks daemon typically offers a D-BUS interface for managing storage devices, including the creation and removal of loop devices. However, a flaw exists in the loop device handler due to inadequate validation of the file index parameter, which fails to account for negative values.
An attacker can exploit this by providing a negative index, causing the daemon to read memory outside of the intended bounds, potentially resulting in a denial-of-service or disclosure of sensitive information.
CVE Identifier: CVE-2025-8067 Severity: Important CVSS v3.1 Base Score: 8.5 Remediation: Install updated Udisks packages immediately
The vulnerability, designated as CVE-2025-8067, was publicly disclosed on Thu, Aug 28, 2025.
The exploit requires no privileges or user interaction and is characterized by a low attack complexity. It poses a significant local privilege escalation risk as it can be triggered by any user with access to the D-BUS interface.
The vulnerability affects Red Hat Enterprise Linux versions 6 through 10, impacting multiple Udisks packages, including udisks2, libudisks2, udisks2-iscsi, udisks2-lsm, and udisks2-lvm2. For RHEL 6, the affected packages include ‘udisks’ and ‘udisks-devel’, but no fixes are planned for these out-of-support versions. Updated packages for RHEL 7, 8, 9, and 10 are available and should be installed immediately.
Red Hat recommends no workaround other than installing the updated packages. System administrators should update their systems through the Red Hat Customer Portal or subscription repositories as soon as possible.
Failure to address this vulnerability may allow attackers to gain unauthorized access to sensitive files or cause critical storage management services to crash. Organizations should review their systems, prioritize patch deployment, and monitor logs for unusual D-BUS calls to Udisks.
Further technical details are available in the Red Hat Bugzilla entry (ID 2388623) and the NVD record for CVE-2025-8067.
Based on reporting by GBHackers.