Ubuntu 26.04 UDisks Significant Local Privilege Escalation Issue USN-8701

Find practical guidance for preventing, investigating, and responding to Linux security problems. Find practical guidance for preventing, investigating, and responding to Linux security problems. _ Review Linux Privileges ×

UDisks could be made to run programs as an administrator. Software Description: - udisks2: service to access and manipulate storage devices Details: It was discovered that UDisks did not correctly validate the caller identity when handling the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. A local attacker with an active console session could possibly use this issue to mount filesystems on behalf of arbitrary users, including privileged accounts, leading to local privilege escalation.

UDisks could be made to run programs as an administrator.

Software Description:

- udisks2: service to access and manipulate storage devices

It was discovered that UDisks did not correctly validate the caller

identity when handling the as-user option in the

org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. A local attacker

with an active console session could possibly use this issue to mount

filesystems on behalf of arbitrary users, including privileged accounts,

leading to local privilege escalation.

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libudisks2-0 2.10.91-1ubuntu2.1 udisks2 2.10.91-1ubuntu2.1 Ubuntu 24.04 LTS libudisks2-0 2.10.1-6ubuntu1.5 udisks2 2.10.1-6ubuntu1.5 After a standard system update you need to reboot your computer to make all the necessary changes.

Ubuntu Security Notice USN-8701-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases