Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Born0Monday

#35229of 60,577
8.5Total CVSS
Vulnerabilities · 1
PT-2025-35093
2025-08-27
8.5
CVE-2025-8067
Unknown
Udisks Daemon
A flaw exists in the Udisks daemon that allows unprivileged users to create loop devices via the D-BUS system. This is due to insufficient validation of the `index` parameter within the loop device handler, specifically a missing lower bound check. An attacker can exploit this by providing a negative value for the `index` parameter, potentially causing a crash of the daemon process or gaining access to internal file descriptors, which could lead to local privilege escalation.