A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor list and index specifying the file where the loop device should be backed. The function itself validates the index value to ensure it isn't bigger than the maximum value allowed. However, it fails to validate the lower bound, allowing the index parameter to be a negative value. Under these circumstances, an attacker can cause the UDisks daemon to crash or perform a local privilege escalation by gaining access to files owned by privileged users.

vendor_unpatched cve-2025-8067: Unpatched CVEs for Debian Linux, Red Hat Enterprise Linux, CentOS Linux (cve-2025-8067)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c866472f43 advisory.

    CVE-2025-8067 Out-Of-Bounds Read in UDisks Daemon

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of udisks2 installed on the remote host is prior to 2.10.2 / 2.9.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-242-01 advisory.

    New udisks2 packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the udisks2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03016-1 advisory.

    - CVE-2025-8067: Fixed missing bounds check can lead to out-of-bounds read in udisks daemon (bsc#1248502)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03015-1 advisory.

    - CVE-2025-8067: Fixed missing bounds check can lead to out-of-bounds read in udisks daemon (bsc#1248502)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03017-1 advisory.

    - CVE-2025-8067: Fixed missing bounds check can lead to out-of-bounds read in udisks daemon (bsc#1248502)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7723-1 advisory.

    Michael Imfeld discovered that UDisks did not check the validity of input data correctly when handling     files for loop devices. An attacker could possibly use this issue to cause a denial of service or execute     arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-5989 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5989-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     August 28, 2025                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : udisks2     CVE ID         : CVE-2025-8067

    Michael Imfeld discovered an out-of-bounds read vulnerability in     udisks2, a D-Bus service to access and manipulate storage devices, which     may result in denial of service (daemon process crash), or in mapping an     internal file descriptor from the daemon process onto a loop device,     resulting in local privilege escalation.

    For the oldstable distribution (bookworm), this problem has been fixed     in version 2.9.4-4+deb12u2.

    For the stable distribution (trixie), this problem has been fixed in     version 2.10.1-12.1+deb13u1.

    We recommend that you upgrade your udisks2 packages.

    For the detailed security status of udisks2 please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/udisks2

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4284 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4284-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     August 28, 2025                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : udisks2     Version        : 2.9.2-2+deb11u3     CVE ID         : CVE-2025-8067


    Michael Imfeld discovered an out-of-bounds read vulnerability in udisks2,     which may result in denial of service (daemon process crash), or in     mapping an internal file descriptor from the daemon process onto a loop     device, resulting in local privilege escalation.



    For Debian 11 bullseye, this problem has been fixed in version     2.9.2-2+deb11u3.

    We recommend that you upgrade your udisks2 packages.

    For the detailed security status of udisks2 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/udisks2

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
259944	Fedora 42 : udisks2 (2025-c866472f43)	Nessus	Fedora Local Security Checks	high
259933	Slackware Linux 15.0 / current udisks2 Vulnerability (SSA:2025-242-01)	Nessus	Slackware Local Security Checks	high
258145	SUSE SLES15 Security Update : udisks2 (SUSE-SU-2025:03016-1)	Nessus	SuSE Local Security Checks	high
258139	SUSE SLES12 Security Update : udisks2 (SUSE-SU-2025:03015-1)	Nessus	SuSE Local Security Checks	high
258132	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : udisks2 (SUSE-SU-2025:03017-1)	Nessus	SuSE Local Security Checks	high
258124	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : UDisks vulnerability (USN-7723-1)	Nessus	Ubuntu Local Security Checks	high
258093	Debian dsa-5989 : gir1.2-udisks-2.0 - security update	Nessus	Debian Local Security Checks	high
258085	Debian dla-4284 : gir1.2-udisks-2.0 - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2025-8067

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high

high