Phantasm (alt)Mar 5
>udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104)
>udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103)

Amazing, burn dbus to the ground
Show threadPhantasm (alt)Mar 5

image.png
Show threadkaiaMar 5
@phnt probably have a quota of how many severe security vulnerabilities they may have in a year or sth for audit reasons 
Show threadPhantasm (alt)
@kaia Red Hat is usually more strict with their ratings then NVD and the rest. Somebody just forgot to change a word in a copy-paste job.

Still interesting that they rate effectively the best ransomware attack vector besides overwriting files as important instead of critical.
Mar 5 at 10:33pmWeb
Show threadtwinspin  Mar 5
@phnt @kaia ahh you need local access you see 
Show threadGNUkko Sauvage (eris-ng) Mar 5
hey twinspin, update your steam games real quick 

CC: @[email protected] @[email protected]