Vulnerability-Lookup

ubuntu-cve-2026-7867

Vulnerability from osv_ubuntu

Published

2026-08-06 00:00

Modified

2026-08-07 15:24

Summary

Details

security update

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-7867	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-7867	REPORT
	https://github.com/storaged-project/udisks/securi…	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "gir1.2-udisks-2.0",
            "binary_version": "2.1.3-1ubuntu0.1+esm1"
          },
          {
            "binary_name": "libudisks2-0",
            "binary_version": "2.1.3-1ubuntu0.1+esm1"
          },
          {
            "binary_name": "udisks2",
            "binary_version": "2.1.3-1ubuntu0.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "udisks2",
        "purl": "pkg:deb/ubuntu/udisks2@2.1.3-1ubuntu0.1+esm1?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.1.0-4",
        "2.1.1-1",
        "2.1.1-1ubuntu1",
        "2.1.2-1",
        "2.1.3-1",
        "2.1.3-1ubuntu0.1",
        "2.1.3-1ubuntu0.1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "gir1.2-udisks-2.0",
            "binary_version": "2.1.7-1ubuntu1+esm1"
          },
          {
            "binary_name": "libudisks2-0",
            "binary_version": "2.1.7-1ubuntu1+esm1"
          },
          {
            "binary_name": "udisks2",
            "binary_version": "2.1.7-1ubuntu1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "udisks2",
        "purl": "pkg:deb/ubuntu/udisks2@2.1.7-1ubuntu1+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.1.6-2ubuntu1",
        "2.1.6-2+git1",
        "2.1.7-1",
        "2.1.7-1ubuntu1",
        "2.1.7-1ubuntu1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "gir1.2-udisks-2.0",
            "binary_version": "2.7.6-3ubuntu0.2+esm2"
          },
          {
            "binary_name": "libudisks2-0",
            "binary_version": "2.7.6-3ubuntu0.2+esm2"
          },
          {
            "binary_name": "udisks2",
            "binary_version": "2.7.6-3ubuntu0.2+esm2"
          },
          {
            "binary_name": "udisks2-btrfs",
            "binary_version": "2.7.6-3ubuntu0.2+esm2"
          },
          {
            "binary_name": "udisks2-lvm2",
            "binary_version": "2.7.6-3ubuntu0.2+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "udisks2",
        "purl": "pkg:deb/ubuntu/udisks2@2.7.6-3ubuntu0.2+esm2?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.6.5-2ubuntu2",
        "2.6.5-2ubuntu3",
        "2.7.6-2ubuntu4",
        "2.7.6-2ubuntu6",
        "2.7.6-3",
        "2.7.6-3ubuntu0.1",
        "2.7.6-3ubuntu0.2",
        "2.7.6-3ubuntu0.2+esm1",
        "2.7.6-3ubuntu0.2+esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "gir1.2-udisks-2.0",
            "binary_version": "2.8.4-1ubuntu2+esm2"
          },
          {
            "binary_name": "libudisks2-0",
            "binary_version": "2.8.4-1ubuntu2+esm2"
          },
          {
            "binary_name": "udisks2",
            "binary_version": "2.8.4-1ubuntu2+esm2"
          },
          {
            "binary_name": "udisks2-bcache",
            "binary_version": "2.8.4-1ubuntu2+esm2"
          },
          {
            "binary_name": "udisks2-btrfs",
            "binary_version": "2.8.4-1ubuntu2+esm2"
          },
          {
            "binary_name": "udisks2-lvm2",
            "binary_version": "2.8.4-1ubuntu2+esm2"
          },
          {
            "binary_name": "udisks2-vdo",
            "binary_version": "2.8.4-1ubuntu2+esm2"
          },
          {
            "binary_name": "udisks2-zram",
            "binary_version": "2.8.4-1ubuntu2+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "udisks2",
        "purl": "pkg:deb/ubuntu/udisks2@2.8.4-1ubuntu2+esm2?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.8.4-1",
        "2.8.4-1build1",
        "2.8.4-1ubuntu1",
        "2.8.4-1ubuntu2",
        "2.8.4-1ubuntu2+esm1",
        "2.8.4-1ubuntu2+esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "gir1.2-udisks-2.0",
            "binary_version": "2.9.4-1ubuntu2.3"
          },
          {
            "binary_name": "libudisks2-0",
            "binary_version": "2.9.4-1ubuntu2.3"
          },
          {
            "binary_name": "udisks2",
            "binary_version": "2.9.4-1ubuntu2.3"
          },
          {
            "binary_name": "udisks2-bcache",
            "binary_version": "2.9.4-1ubuntu2.3"
          },
          {
            "binary_name": "udisks2-btrfs",
            "binary_version": "2.9.4-1ubuntu2.3"
          },
          {
            "binary_name": "udisks2-lvm2",
            "binary_version": "2.9.4-1ubuntu2.3"
          },
          {
            "binary_name": "udisks2-zram",
            "binary_version": "2.9.4-1ubuntu2.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "udisks2",
        "purl": "pkg:deb/ubuntu/udisks2@2.9.4-1ubuntu2.3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.9.4-1",
        "2.9.4-1build1",
        "2.9.4-1ubuntu1",
        "2.9.4-1ubuntu2",
        "2.9.4-1ubuntu2.2",
        "2.9.4-1ubuntu2.3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "gir1.2-udisks-2.0",
            "binary_version": "2.10.1-6ubuntu1.3"
          },
          {
            "binary_name": "libudisks2-0",
            "binary_version": "2.10.1-6ubuntu1.3"
          },
          {
            "binary_name": "udisks2",
            "binary_version": "2.10.1-6ubuntu1.3"
          },
          {
            "binary_name": "udisks2-btrfs",
            "binary_version": "2.10.1-6ubuntu1.3"
          },
          {
            "binary_name": "udisks2-lvm2",
            "binary_version": "2.10.1-6ubuntu1.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "udisks2",
        "purl": "pkg:deb/ubuntu/udisks2@2.10.1-6ubuntu1.3?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.10.1-1ubuntu1",
        "2.10.1-1ubuntu2",
        "2.10.1-6",
        "2.10.1-6build1",
        "2.10.1-6ubuntu1",
        "2.10.1-6ubuntu1.2",
        "2.10.1-6ubuntu1.3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "gir1.2-udisks-2.0",
            "binary_version": "2.10.91-1ubuntu2"
          },
          {
            "binary_name": "libudisks2-0",
            "binary_version": "2.10.91-1ubuntu2"
          },
          {
            "binary_name": "udisks2",
            "binary_version": "2.10.91-1ubuntu2"
          },
          {
            "binary_name": "udisks2-btrfs",
            "binary_version": "2.10.91-1ubuntu2"
          },
          {
            "binary_name": "udisks2-lvm2",
            "binary_version": "2.10.91-1ubuntu2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "udisks2",
        "purl": "pkg:deb/ubuntu/udisks2@2.10.91-1ubuntu2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.10.1-12.1ubuntu2",
        "2.10.91-1ubuntu1",
        "2.10.91-1ubuntu2"
      ]
    }
  ],
  "aliases": [],
  "details": "security update",
  "id": "UBUNTU-CVE-2026-7867",
  "modified": "2026-08-07T15:24:06Z",
  "published": "2026-08-06T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-7867"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7867"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/storaged-project/udisks/security/advisories/GHSA-j42g-v9jw-6ph3"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-7867"
  ]
}

CVE-2026-7867 (GCVE-0-2026-7867)

Vulnerability from cvelistv5 – Published: 2026-08-06 15:36 – Updated: 2026-08-08 02:06

Title

Udisks2: udisks2: local privilege escalation via as-user option spoofing

Summary

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-863 - Incorrect Authorization

Assigner

redhat

References

4 references

URL	Tags
https://access.redhat.com/security/cve/CVE-2026-7867	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2466747	issue-trackingx_refsource_REDHAT
https://github.com/storaged-project/udisks/releas…
https://github.com/storaged-project/udisks/securi…

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2026-08-06 00:00

Credits

Red Hat would like to thank Azizcan Daştan (azqzazq1) and Özlem Ozan (oz7oz7) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-7867",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-08T02:06:34.276824Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-08T02:06:45.697Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "udisks2",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "udisks2",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "udisks2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "udisks2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Azizcan Da\u015ftan (azqzazq1) and \u00d6zlem Ozan (oz7oz7) for reporting this issue."
        }
      ],
      "datePublic": "2026-08-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the \u0027as-user\u0027 option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the \u0027as-user\u0027 parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-06T15:36:02.760Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-7867"
        },
        {
          "name": "RHBZ#2466747",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466747"
        },
        {
          "url": "https://github.com/storaged-project/udisks/releases/tag/udisks-2.11.2"
        },
        {
          "url": "https://github.com/storaged-project/udisks/security/advisories/GHSA-j42g-v9jw-6ph3"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-21T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-06T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Udisks2: udisks2: local privilege escalation via as-user option spoofing",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-863: Incorrect Authorization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-7867",
    "datePublished": "2026-08-06T15:36:02.760Z",
    "dateReserved": "2026-05-05T13:56:06.596Z",
    "dateUpdated": "2026-08-08T02:06:45.697Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2026-7867

Vulnerability from osv_ubuntu

CVE-2026-7867 (GCVE-0-2026-7867)

Tags

Sightings

Nomenclature