Advisory ROSA-SA-2025-3088

Software: udisks2 2.8.4 OS: rosa-server79 unaffected versions = udisks2-2.8.4-1.0.1.res7 affected versions udisks2-2.8.4-1.0.1.res7 CVE-ID: CVE-2025-8067 BDU-ID: 2025-11284 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the fdindex fknction of the Udisks storage device query and management program...

The vulnerability of the fd_index() function in the program, which is used for querying and managing Udisks storage devices, allows a malicious actor to escalate their privileges and cause service failures.

The vulnerability of the fdindex function in the Udisks device management and storage-related operations is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to increase their privileges and cause service failures...