CVE-2025-8067: Out-of-bounds Read in storaged-project udisks
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor list and index specifying the file where the loop device should be backed. The function itself validates the index value to ensure it isn't bigger than the maximum value allowed. However, it fails to validate the lower bound, allowing the index parameter to be a negative value. Under these circumstances, an attacker can cause the UDisks daemon to crash or perform a local privilege escalation by gaining access to files owned by privileged users.
AI Analysis
Technical Summary
The vulnerability in Udisks daemon involves an out-of-bounds read caused by failure to validate the lower bound of the index parameter used in the loop device handler via D-BUS. While the upper bound is checked, negative values are accepted, leading to potential daemon crashes or local privilege escalation by unauthorized users. The issue affects version 2.10.3 of udisks and has been assigned a CVSS 3.1 score of 8.5 (high severity). Red Hat has released security updates for multiple architectures and versions of Red Hat Enterprise Linux 8 and 9 to fix this vulnerability.
Potential Impact
An attacker with local access and no privileges can exploit this vulnerability to cause a denial of service by crashing the Udisks daemon or escalate privileges locally by gaining access to files owned by privileged users. The CVSS score of 8.5 reflects significant confidentiality, integrity, and availability impacts. There are no known exploits in the wild at the time of the advisory.
Mitigation Recommendations
Red Hat has released official security updates for udisks2 that fix this vulnerability. Users of affected Red Hat Enterprise Linux 8 and 9 versions should apply the provided patches as detailed in the Red Hat advisories RHSA-2025:15017 and RHSA-2025:15018. For update instructions, refer to https://access.redhat.com/articles/11258. Applying these updates mitigates the vulnerability. No additional vendor-recommended mitigations are indicated.
CVE-2025-8067: Out-of-bounds Read in storaged-project udisks
Description
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor list and index specifying the file where the loop device should be backed. The function itself validates the index value to ensure it isn't bigger than the maximum value allowed. However, it fails to validate the lower bound, allowing the index parameter to be a negative value. Under these circumstances, an attacker can cause the UDisks daemon to crash or perform a local privilege escalation by gaining access to files owned by privileged users.
CVSS v3.1
Score 8.5high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in Udisks daemon involves an out-of-bounds read caused by failure to validate the lower bound of the index parameter used in the loop device handler via D-BUS. While the upper bound is checked, negative values are accepted, leading to potential daemon crashes or local privilege escalation by unauthorized users. The issue affects version 2.10.3 of udisks and has been assigned a CVSS 3.1 score of 8.5 (high severity). Red Hat has released security updates for multiple architectures and versions of Red Hat Enterprise Linux 8 and 9 to fix this vulnerability.
Potential Impact
An attacker with local access and no privileges can exploit this vulnerability to cause a denial of service by crashing the Udisks daemon or escalate privileges locally by gaining access to files owned by privileged users. The CVSS score of 8.5 reflects significant confidentiality, integrity, and availability impacts. There are no known exploits in the wild at the time of the advisory.
Mitigation Recommendations
Red Hat has released official security updates for udisks2 that fix this vulnerability. Users of affected Red Hat Enterprise Linux 8 and 9 versions should apply the provided patches as detailed in the Red Hat advisories RHSA-2025:15017 and RHSA-2025:15018. For update instructions, refer to https://access.redhat.com/articles/11258. Applying these updates mitigates the vulnerability. No additional vendor-recommended mitigations are indicated.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- redhat
- Date Reserved
- 2025-07-22T22:54:45.533Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/errata/RHSA-2025:15017","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:15018","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:15020","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:15956","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:16021","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:16090","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:16106","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:16121","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:16122","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:16125","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:16130","vendor":"Red Hat"},{"url":"https://access.redhat.com/security/cve/CVE-2025-8067","vendor":"Red Hat"}]
Threat ID: 68b06fc4ad5a09ad006dc21d
Added to database: 08/28/2025, 15:03:32 UTC
Last enriched: 07/02/2026, 22:22:50 UTC
Last updated: 09/10/2026, 19:36:52 UTC
Views: 226
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.