This bug was fixed in the package udisks2 - 2.10.1-6ubuntu1.5
---------------
udisks2 (2.10.1-6ubuntu1.5) noble-security; urgency=medium
* SECURITY UPDATE: Privilege escalation via mount point injection
- debian/patches/CVE-2026-7867-1.patch: udiskslinuxfilesystem: Separate real
caller identity from as-user target in src/udiskslinuxfilesystem.c.
- debian/patches/CVE-2026-7867-2.patch: udiskslinuxfilesystem: Rework fstab
mount authorization for as-user in data/org.freedesktop.UDisks2.xml,
src/udiskslinuxfilesystem.c.
- debian/patches/CVE-2026-7867-3.patch: udiskslinuxfilesystem: Log real
caller uid for as-user mounts in src/udiskslinuxfilesystem.c.
- debian/patches/CVE-2026-7867-4.patch: udisksdaemonutil: Pass as-user
target to polkit details in src/udisksdaemonutil.c.
- debian/patches/CVE-2026-7867-5.patch: tests: Add security tests for as-
user mount authorization in src/tests/dbus-tests/test_80_filesystem.py.
- CVE-2026-7867
-- Marc Deslauriers <[email protected]> Mon, 17 Aug 2026
10:49:58 -0400
** Changed in: udisks2 (Ubuntu Noble)
Status: Fix Committed => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2026-7867
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2156438
Title:
Autopkgtest fails on noble - scsi_debug module not available
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/udisks2/+bug/2156438/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
