Known vulnerabilities in udisks2 (Red Hat package)
Vendor:
Red Hat Inc.
Software:
udisks2 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:udisks2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
5
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123339 - Missing Authorization CVE-2026-26104 |
CWE-862 | Low | 2.10.90-5.el10_0.2, 2.10.90-6.el10_1.1 | 27.02.2026 |
SB2026022745 SB2026022746 SB2026022747 and 3 more |
||
| #VU123338 - Missing Authorization CVE-2026-26103 |
CWE-862 | Low | 2.10.90-5.el10_0.2, 2.10.90-6.el10_1.1 | 27.02.2026 |
SB2026022745 SB2026022746 SB2026022747 and 3 more |
||
| #VU114677 - Out-of-bounds read CVE-2025-8067 |
CWE-125 | Low | 2.8.3-2.el8_2.1, 2.8.4-1.el7_9.2, 2.9.0-6.el8_4.1, 2.9.0-9.el8_6.1, 2.9.0-13.el8_8.1, 2.9.4-3.el9_0.2, 2.9.4-7.el9_2.2, 2.9.4-10.el9_4.2 | 02.09.2025 |
SB2025090252 SB2025090254 SB2025090255 and 18 more |
||
| #VU85887 - Use of Externally-Controlled Format String CVE-2018-17336 |
CWE-134 | Low | 2.7.3-9.el7 | 30.01.2024 |
SB2024013008 SB2018092614 SB2018092615 and 2 more |
||
| #VU64024 - Improper input validation CVE-2021-3802 |
CWE-20 | Low | 2.9.0-9.el8 | 07.06.2022 |
SB2021112920 SB2022061544 SB2022090742 and 7 more |