> USN-8701-1: UDisks vulnerability
[DATE: 31/08/2026 12:24]
[LANGUAGE: EN]
It was discovered that UDisks did not correctly validate the caller
identity when handling the as-user option in the
org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. A local attacker
with an active console session could possibly use this issue to mount
filesystems on behalf of arbitrary users, including privileged accounts,
leading to local privilege escalation.