Nixpkgs Security Tracker

Login with GitHub

Details of issue NIXPKGS-2025-0001

NIXPKGS-2025-0001
published on 29 Oct 2025
Permalink CVE-2025-8067
8.5 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): CHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): LOW
  • Availability impact (A): HIGH
updated 5 months ago by @balsoft Activity log
  • Created automatic suggestion 6 months, 1 week ago
  • @balsoft added maintainer @balsoft 5 months ago
  • @balsoft accepted 5 months ago
  • @balsoft published on GitHub 5 months ago
Udisks: out-of-bounds read in udisks daemon

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor list and index specifying the file where the loop device should be backed. The function itself validates the index value to ensure it isn't bigger than the maximum value allowed. However, it fails to validate the lower bound, allowing the index parameter to be a negative value. Under these circumstances, an attacker can cause the UDisks daemon to crash or perform a local privilege escalation by gaining access to files owned by privileged users.

References

Affected products

udisks
udisks2
  • <2.10.91
  • <2.10.2
  • *

Matching in nixpkgs

pkgs.udisks2

Daemon, tools and libraries to access and manipulate disks, storage devices and technologies

  • nixos-unstable -

Package maintainers

Additional maintainers