CVE-2026-7867-disk2root

Filesystem.Mount → as-user 欺骗 → 授权绕过 → 根上下文挂载 → LPE 概述 CVE-2026-7867 是 udisks2 中的一个本地权限提升漏洞，涉及 Filesystem.Mount D-Bus 方法、as-user 选项、fstab 管理的挂载流程以及存在缺陷的授权处理。 此私有仓库包含在受控实验室环境中验证该问题所使用的技术研究笔记和 PoC 脚本。 该漏洞由以下人员发现并报告： Azizcan Daştan | azqzazq1 ---|-...

CVE-2021-4034

CVE-2021-4034 这是针对 polkit 的 pkexec 二进制文件中发现的漏洞的 POC，该二进制文件用于以其他用户身份运行程序。 深入研究：https://access.redhat.com/security/vulnerabilities/RHSB-2022-001 运行 gcc poc.c -o poc && ./poc...

Rocky Linux 10.2 [CIQ] Security Update: libudisks2 / libudisks2-debuginfo / libudisks2-devel / udisks2 / etc (crlsa-2026_53435)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202653435 advisory. udisks2: udisks2: Local Privilege Escalation via as-user option spoofing CVE-2026-7867 Tenable has extracted the preceding description block directly from the C...

MGASA-2026-0453 Updated udisks2 package fixes a security vulnerability

Local privilege escalation via as-user option spoofing. CVE-2026-7867...

Updated udisks2 package fixes a security vulnerability

Local privilege escalation via as-user option spoofing. CVE-2026-7867...

Important: Red Hat Security Advisory: udisks2 security update

An update for udisks2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 10 : udisks2 (RHSA-2026:64798)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64798 advisory. The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes:...

openSUSE 16: libudisks2-0 / libudisks2-0-devel / libudisks2-0_btrfs / etc (openSUSE-SU-2026:21704-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21704-1 advisory. This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the...

USN-8701-1: UDisks vulnerability

It was discovered that UDisks did not correctly validate the caller identity when handling the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. A local attacker with an active console session could possibly use this issue to mount filesystems on behalf of arbitrary...

Important: udisks2

Issue Overview: Local privilege escalation via as-user mount spoofing NOTE: https://github.com/azqzazq1/CVE-2026-7867-disk2root CVE-2026-7867 Affected Packages: udisks2 Issue Correction: Run dnf update udisks2 --releasever 2023.12.20260831 or dnf update --advisory ALAS2023-2026-2104 --releasever...

Amazon Linux 2023 : libudisks2, libudisks2-devel, udisks2 (ALAS2023-2026-2104)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2104 advisory. Local privilege escalation via as-user mount spoofing NOTE: https://github.com/azqzazq1/CVE-2026-7867-disk2root CVE-2026-7867 Tenable has extracted the preceding description block directly from the...

SUSE-SU-2026:23405-1 Security update for udisks2

This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...

SUSE-SU-2026:23575-1 Security update for udisks2

This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...

OPENSUSE-SU-2026:21704-1 Security update for udisks2

This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...

AlmaLinux 10 : udisks2 (ALSA-2026:53435)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:53435 advisory. udisks2: udisks2: Local Privilege Escalation via as-user option spoofing CVE-2026-7867 Tenable has extracted the preceding description block directly from the...

udisks2 security update

An update is available for udisks2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Udisks project provides a daemon, tools, and libraries to access and...

RLSA-2026:53435 Important: udisks2 security update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks2: udisks2: Local Privilege Escalation via as-user option spoofing CVE-2026-7867 For more details about the security issues, including the impact, a...

RockyLinux 10 : udisks2 (RLSA-2026:53435)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53435 advisory. udisks2: udisks2: Local Privilege Escalation via as-user option spoofing CVE-2026-7867 Tenable has extracted the preceding description block directly from the...

udisks2: udisks2: Local Privilege Escalation via as-user option spoofing

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...

ALSA-2026:53435 Important: udisks2 security update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks2: udisks2: Local Privilege Escalation via as-user option spoofing CVE-2026-7867 For more details about the security issues, including the impact, a...