Udisks Security Update Advisory (CVE-2025-8067)

Overview

 

We have released a security update to address a vulnerability in Udisks. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-8067

 

udisks2 Version: 2.10.90 and earlier
udisks2 Version: 2.10.1 and earlier

 

 

Resolved Vulnerabilities

 

Out-of-bounds read vulnerability in the Udisks daemon (CVE-2025-8067)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-8067

 

udisks2 Version: 2.10.91
udisks2 Version: 2.10.2

 

** Apply patches from the referenced sites [2][3][4][5]

 

 

References
[1] Out-Of-Bounds Read in UDisks Daemon
https://github.com/storaged-project/udisks/security/advisories/GHSA-742q-gggc-473g
[2] cve-2025-8067
https://access.redhat.com/security/cve/CVE-2025-8067
[3] cve-2025-8067
https://ubuntu.com/security/CVE-2025-8067
[4] cve-2025-8067
https://www.suse.com/security/cve/CVE-2025-8067.html
[5] cve-2025-8067
https://security-tracker.debian.org/tracker/CVE-2025-8067