CVE-2026-26103— Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api
Quick assessment
Affected
Red Hat Red Hat Enterprise Linux 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
udisks是storaged-project开源的一款用于查询和管理存储设备的守护程序。 udisks存在安全漏洞，该漏洞源于特权D-Bus API缺少授权检查，可能导致本地非特权用户覆盖加密元数据，造成拒绝服务。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1499 · Endpoint Denial of ServiceAffected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:2.10.90-6.el10_1.1< * |
unaffected |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:2.10.90-5.el10_0.2< * |
unaffected |
| Red Hat | Red Hat Enterprise Linux 6 | any |
unaffected |
| Red Hat | Red Hat Enterprise Linux 7 | any |
unaffected |
| Red Hat | Red Hat Enterprise Linux 8 | any |
unaffected |
| Red Hat | Red Hat Enterprise Linux 9 | any |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-26103
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
udisks 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
udisks是storaged-project开源的一款用于查询和管理存储设备的守护程序。 udisks存在安全漏洞，该漏洞源于特权D-Bus API缺少授权检查，可能导致本地非特权用户覆盖加密元数据，造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:2.10.90-6.el10_1.1 ~ * |
cpe:/o:redhat:enterprise_linux:10.1
|
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:2.10.90-5.el10_0.2 ~ * |
cpe:/o:redhat:enterprise_linux_eus:10.0
|
|
| Red Hat | Red Hat Enterprise Linux 6 | - |
cpe:/o:redhat:enterprise_linux:6
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
II. Public POCs for CVE-2026-26103
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-26103
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-26103 (2)
Same Patch Batch · Red Hat · 2026-02-25 · 3 CVEs total
| CVE-2026-3118 | 6.5 MEDIUM | Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer h |
| CVE-2026-26104 | 5.5 MEDIUM | Udisks: missing authorization check allows unprivileged users to back up luks headers via |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
-
CVE-2026-103641
Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr u -
CVE-2026-103399
Libsoup: soupserver: http/1 request smuggling via undrained -
CVE-2026-103242
Rpm: heap-based buffer overflow write in hex2binv() via a mi -
CVE-2026-102560
Libsoup: libsoup: heap buffer overflow during outgoing perme -
CVE-2026-102559
Libsoup: libsoup: heap buffer overflow during websocket clie
Same vendor: Red Hat
-
CVE-2026-86345
389-ds-base: 389-ds-base: starttls plaintext-buffer retentio -
CVE-2026-86344
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool -
CVE-2026-103884
Keycloak-services: keycloak-services: path traversal in x.50 -
CVE-2026-56098
Rubygem-katello: improper authorization logic allows resourc -
CVE-2026-12545
Rubygem-hammer_cli: command injection via insecure editor in
Same weakness: CWE-862
-
CVE-2026-93832
摩托罗拉系统应用权限导出漏洞 -
CVE-2026-17053
SMBus callback-removal syscalls accept an unvalidated user p -
CVE-2026-97280
WordPress Review Schema plugin 3.1.0 - Broken Access Control -
CVE-2026-97297
WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Cont -
CVE-2026-97281
WordPress WP Project Manager plugin <= 4.0.7 - Broken Access
V. Comments for CVE-2026-26103
No comments yet