[Git][security-tracker-team/security-tracker][master] Add udisks2 CVE-2026-7867

[Alberto Garcia (@berto)]

Alberto Garcia pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5bfa2d78 by Alberto Garcia at 2026-08-06T15:00:23+02:00
Add udisks2 CVE-2026-7867

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -422,6 +422,9 @@ CVE-2026-8029 (The ZTE Smart Life app contains an SQL injection vulnerability th
 	NOT-FOR-US: ZTE
 CVE-2026-7869 (IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal  ...)
 	NOT-FOR-US: IBM
+CVE-2026-7867 [Local privilege escalation via as-user mount spoofing]
+	- udisks2 <unfixed>
+	NOTE: https://github.com/azqzazq1/CVE-2026-7867-disk2root
 CVE-2026-7726 (The Layouts for WPBakery plugin for WordPress is vulnerable to unautho ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7693 (The Backup Migration plugin for WordPress is vulnerable to OS Command  ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -146,6 +146,8 @@ tomcat10
 --
 tomcat11
 --
+udisks2 (berto)
+--
 util-linux (carnil)
   Maintainer is preparing updates
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5bfa2d78d047785f6d5d71931fd8d50ed6622d66

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5bfa2d78d047785f6d5d71931fd8d50ed6622d66
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260806/ead9e705/attachment-0001.htm>