Linux UDisks Daemon Vulnerability Lets Attackers Access Privileged User Files

Red Hat has disclosed a critical security flaw in the Udisks daemon that allows unprivileged users to exploit an out-of-bounds read vulnerability and gain access to files owned by privileged accounts. The vulnerability, tracked as CVE-2025-8067, was publicly released on 28 August 2025 and is rated Important with a CVSS v3.1 base score of 8.5 by Red Hat Product Security.

Under normal operation, the Udisks daemon provides a D-BUS interface for managing storage devices, but a flaw in the loop device handler fails to validate the lower bound of the file index parameter, allowing an attacker to supply a negative index and read memory outside the bounds of the file descriptor list. Affected distributions include Red Hat Enterprise Linux versions 6 through 10, with updated packages such as udisks2 and libudisks2 available for RHEL 7–10; no fixes are planned for RHEL 6.

Install the patched Udisks packages immediately, as the advisory notes there is no workaround, and continued operation of vulnerable daemons may let local attackers access sensitive files or crash storage services. According to the advisory, successful exploitation requires no privileges or user interaction and the attack complexity is low.