High severity7.1NVD Advisory· Published Feb 25, 2026· Updated Jul 15, 2026
CVE-2026-26103
CVE-2026-26103
Description
A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16- Red Hat/Red Hat Enterprise Linux 10.0 Extended Update Supportv5cpe:/o:redhat:enterprise_linux_eus:10.0Range: 0:2.10.90-5.el10_0.2
- osv-coords7 versionspkg:rpm/almalinux/libudisks2pkg:rpm/almalinux/libudisks2-develpkg:rpm/almalinux/udisks2-lvm2pkg:rpm/almalinux/udisks2pkg:rpm/almalinux/udisks2-iscsipkg:rpm/almalinux/udisks2-lsmpkg:rpm/opensuse/udisks2&distro=openSUSE%20Tumbleweed
< 2.10.90-6.el10_1.1.alma.1+ 6 more
- (no CPE)range: < 2.10.90-6.el10_1.1.alma.1
- (no CPE)range: < 2.10.90-6.el10_1.1.alma.1
- (no CPE)range: < 2.10.90-6.el10_1.1.alma.1
- (no CPE)range: < 2.10.90-6.el10_1.1.alma.1
- (no CPE)range: < 2.10.90-6.el10_1.1.alma.1
- (no CPE)range: < 2.10.90-6.el10_1.1.alma.1
- (no CPE)range: < 2.11.0-2.1
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
- cpe:/o:redhat:enterprise_linux:10.1range: 0:2.10.90-6.el10_1.1
- cpe:/o:redhat:enterprise_linux:6
- cpe:/o:redhat:enterprise_linux:7
- cpe:/o:redhat:enterprise_linux:8
- cpe:/o:redhat:enterprise_linux:9
Patches
Vulnerability mechanics
References
6- access.redhat.com/security/cve/CVE-2026-26103nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- access.redhat.com/errata/RHSA-2026:3476nvd
- access.redhat.com/errata/RHSA-2026:5831nvd
- github.com/storaged-project/udisks/security/advisories/GHSA-c75h-phf8-ccjmnvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26103.jsonnvd
News mentions
0No linked articles in our index yet.