점검 대응높음KEV 미등록
CVE-2025-8067
storaged-project udisks, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support 취약점
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor list and index specifying the file where the loop device should be backed. The function itself validates the index value to ensure it isn't bigger than the maximum value allowed. However, it fails to validate the lower bound, allowing the index parameter to be a negative value. Under these circumsta...
- 대응 우선순위
- 점검
- CVSS
- 8.5
- EPSS
- 0.65% 백분위 47.7% · 2026.08.03 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2025.08.29