An update for udisks2 is now available for openEuler-24.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3461 Final 1.0 1.0 2026-08-20 Initial 2026-08-20 2026-08-20 openEuler SA Tool V1.0 2026-08-20 udisks2 security update An update for udisks2 is now available for openEuler-24.03-LTS-SP3 The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. Security Fix(es): A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.(CVE-2026-7867) An update for udisks2 is now available for openEuler-24.03-LTS-SP3. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High udisks2 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3461 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-7867 https://nvd.nist.gov/vuln/detail/CVE-2026-7867 openEuler-24.03-LTS-SP3 libudisks2-2.10.1-10.oe2403sp3.aarch64.rpm libudisks2-devel-2.10.1-10.oe2403sp3.aarch64.rpm udisks2-2.10.1-10.oe2403sp3.aarch64.rpm udisks2-btrfs-2.10.1-10.oe2403sp3.aarch64.rpm udisks2-debuginfo-2.10.1-10.oe2403sp3.aarch64.rpm udisks2-debugsource-2.10.1-10.oe2403sp3.aarch64.rpm udisks2-lsm-2.10.1-10.oe2403sp3.aarch64.rpm udisks2-lvm2-2.10.1-10.oe2403sp3.aarch64.rpm libudisks2-2.10.1-10.oe2403sp3.x86_64.rpm libudisks2-devel-2.10.1-10.oe2403sp3.x86_64.rpm udisks2-2.10.1-10.oe2403sp3.x86_64.rpm udisks2-btrfs-2.10.1-10.oe2403sp3.x86_64.rpm udisks2-debuginfo-2.10.1-10.oe2403sp3.x86_64.rpm udisks2-debugsource-2.10.1-10.oe2403sp3.x86_64.rpm udisks2-lsm-2.10.1-10.oe2403sp3.x86_64.rpm udisks2-lvm2-2.10.1-10.oe2403sp3.x86_64.rpm udisks2-2.10.1-10.oe2403sp3.src.rpm A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users. 2026-08-20 CVE-2026-7867 openEuler-24.03-LTS-SP3 High 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H udisks2 security update 2026-08-20 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3461