48 matches found
SUSE-SU-2026:21742-1 Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606...
SUSE-SU-2026:21727-1 Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606...
Security update for util-linux
This update for util-linux fixes the following issue CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can r...
SUSE-SU-2026:1962-1 Security update for util-linux
This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606...
OESA-2026-2211 util-linux security update
The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability has been identified in the SUID binary...
Astra Linux - уязвимость в linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't query the device logical block size multiple times Devices block sizes may change. One of these cases is a loop device by using ioctl LOOPSETBLOCKSIZE. While this may cause other issues like IO being rejected, in t...
Astra Linux - уязвимость в udisks2
A flaw was discovered in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is accomplished through the loop device handler, which processes requests sent through the D-BUS interface. As part of this handler’s functionality, it receives a lis...
CVE-2026-27456
util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privilege...
Unity Linux 20.1060e / 20.1070e Security Update: udisks2 (UTSA-2026-006231)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006231 advisory. A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler...
Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2026-1059)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MiracleLinux 7 : udisks2-2.8.4-1.0.1.el7.AXS7 (AXSA:2025-11447:04)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11447:04 advisory. CVE-2025-8067: fix issue allowing unprivileged users to create loop devices with negative index values CVEs: CVE-2025-8067 A flaw was found in the Udisks...
Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2491)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP13 : udisks2 (EulerOS-SA-2025-2512)
According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the...
Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2533)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CLSA-2025-1764885482 udisks2: Fix of CVE-2025-8067
CVE-2025-8067: fix issue allowing unprivileged users to create loop devices with negative index values...
CLSA-2025-1763141692 udisks2: Fix of CVE-2025-8067
CVE-2025-8067: fix issue allowing unprivileged users to create loop devices with negative index values...
CLSA-2025-1763123915 udisks2: Fix of CVE-2025-8067
CVE-2025-8067: fix issue allowing unprivileged users to create loop devices by validating lower bound of index parameter in loop device handler function...
Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2343)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TencentOS Server 3: udisks2 (TSSA-2025:0805)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0805 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-443680)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-443680 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't query the device logical block size multiple times Devices block sizes may change...