CVE-2026-26103

🔴 HIGH

A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivi...

Published
Feb 25, 2026
Last Modified
Mar 02, 2026
Views
1
Bookmarks
0

A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.

Affected Products (2)

redhat - enterprise_linux

Version: 10.0

freedesktop - udisks

Version: 2.0.0

CVSS Scores

CVSS 3.1 7.1
7.1
HIGH
CVSS 2.0 7.1

Additional Information

Source
secalert@redhat.com
State
Modified

Share CVE-2026-26103

Share on Social Media

Copy Link

Embed Code

Request Expert Analysis

Request a professional security analysis for CVE-2026-26103 from our verified experts.

Credits System

Use your credits to get expert analysis from verified security professionals. Purchase more credits anytime!

Add 3 credits for accelerated delivery

Base Cost: 8 credits
Priority Upgrade: + credits
SLA Acceleration: +3 credits
Total Cost:
Your Balance:

Insufficient Credits

You need more credits to submit this request.

Buy Credits

Report Analysis