Red Hat Enterprise Linux up to 10 D-BUS Interface out-of-bounds

Summaryinfo

A vulnerability, which was classified as critical, has been found in Red Hat Enterprise Linux 6/7/8/9/10. Impacted is an unknown function of the component D-BUS Interface. Performing a manipulation results in out-of-bounds. This vulnerability is reported as CVE-2025-8067. The attack requires a local approach. No exploit exists.

Detailsinfo

A vulnerability classified as critical has been found in Red Hat Enterprise Linux 6/7/8/9/10. This affects an unknown functionality of the component D-BUS Interface. The manipulation with an unknown input leads to a out-of-bounds vulnerability. CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor list and index specifying the file where the loop device should be backed. The function itself validates the index value to ensure it isn't bigger than the maximum value allowed. However, it fails to validate the lower bound, allowing the index parameter to be a negative value. Under these circumstances, an attacker can cause the UDisks daemon to crash or perform a local privilege escalation by gaining access to files owned by privileged users.

The advisory is shared at access.redhat.com. This vulnerability is uniquely identified as CVE-2025-8067 since 07/23/2025. The exploitability is told to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/09/2025).

The vulnerability scanner Nessus provides a plugin with the ID 258093 (Debian dsa-5989 : gir1.2-udisks-2.0 - security update), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (258093), EUVD (EUVD-2025-26083) and CERT Bund (WID-SEC-2025-1928). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Affected

• Debian Linux
• Amazon Linux 2
• Red Hat Enterprise Linux
• Fedora Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• SUSE openSUSE
• RESF Rocky Linux
• Open Source Linux

Productinfo

Type

• Operating System

Vendor

• Red Hat

Name

• Enterprise Linux

Version

• 6
• 7
• 8
• 9
• 10

License

• commercial

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion