Critical Security Vulnerability in libudisks2: Red Hat Security Advisory RHSA-2026:64798
Summary
RHSA-2026:64798: Red Hat Security Advisory: udisks2 security update. Affects libudisks2 versions < 0:2.10.90-5.el10_0.3. Fixed in 0:2.10.90-5.el10_0.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
libudisks2 is a library that provides a high-level API for managing disk drives and storage devices in Linux environments. It is part of the udisks2 package, which is widely used for handling disk operations such as mounting, unmounting, and managing storage devices. The library is essential for applications that require direct interaction with storage hardware, making it a critical component in many Linux distributions. The vulnerability in question affects versions prior to 0:2.10.90-5.el10_0.3, potentially exposing systems to security risks.
Vulnerability Detail
The vulnerability identified as CVE-2026-7867 in libudisks2 allows for unauthorized access and manipulation of disk operations. This could lead to data corruption, unauthorized data access, or even system compromise. The flaw originates from improper validation of user input, which can be exploited by an attacker with local access to the system. The implications of this vulnerability are severe, as it affects the integrity and confidentiality of data managed by the library.
How To Fix
Minimum fixed version
0:2.10.90-5.el10_0.3
This is the first release that contains the fix.
sudo dnf update libudisks2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected library by modifying permissions or using system access controls to limit user access until the package is updated.
Conclusion
The vulnerability in libudisks2, identified as CVE-2026-7867, poses significant risks to systems using this library. It is crucial to update to the patched version to safeguard against potential exploits. Users are encouraged to monitor their systems for vulnerabilities using tools like Vulert.
See every vulnerability recorded for libudisks2 →
FAQ
CVE-2026-7867 is a security vulnerability in the libudisks2 library that allows unauthorized access and manipulation of disk operations.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include data corruption, unauthorized access to sensitive information, and potential system compromise.
You can update the package by running the command 'sudo yum update libudisks2' in your terminal.
Yes, you can restrict access to the affected library by modifying permissions or using system access controls.
Related vulnerabilities
Recent vulnerabilities recorded for libudisks2.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
