CVE & CISA-KEV CatalogNVD
CVE-2026-26104
MEDIUM5.5
CVSS v3
Description
A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.
How to fix
Remediation Available
udisks2Debian
Fixed in:2.11.1-1CVE-2026-26104
libudisks2Rocky
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
libudisks2Red Hat / RHEL
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
libudisks2-debuginfoRocky
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
libudisks2-debuginfoRed Hat / RHEL
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
libudisks2-develRed Hat / RHEL
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
libudisks2-develRocky
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2Red Hat / RHEL
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
udisks2Rocky
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
udisks2-debuginfoRocky
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
udisks2-debuginfoRed Hat / RHEL
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-debugsourceRed Hat / RHEL
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-debugsourceRocky
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
udisks2-iscsiRocky
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-iscsiRed Hat / RHEL
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-iscsi-debuginfoRocky
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-iscsi-debuginfoRed Hat / RHEL
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
udisks2-lsmRocky
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-lsmRed Hat / RHEL
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-lsm-debuginfoRocky
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-lsm-debuginfoRed Hat / RHEL
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-lvm2Rocky
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
udisks2-lvm2Red Hat / RHEL
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
udisks2-lvm2-debuginfoRed Hat / RHEL
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
udisks2-lvm2-debuginfoRocky
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-6.el10_1.1RHSA-2026:3476
Fixed in:0:2.10.90-5.el10_0.2RHSA-2026:5831
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploit Intelligence
0.07%probability of exploitation in 30 days
0thpercentile
Low risk: more likely to be exploited than 0% of all known CVEs.
References
Vendor Advisory2
Other references3
Related Vulnerabilities
Other CWE-862 (Missing Authorization) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2021-39226 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2022-0543 | Critical | 10.0 | 100% | KEV | Fix |
| CVE-2021-21978 | Critical | 9.8 | 99% | - | Fix |
| CVE-2023-52163 | High | 8.8 | 96% | KEV | - |
| CVE-2022-1329 | High | 8.8 | 93% | - | - |
| CVE-2023-6875 | Critical | 9.8 | 90% | - | - |
Embed a live status badge for CVE-2026-26104
Markdown
[](https://tridentstack.com/cve/CVE-2026-26104)HTML
<a href="https://tridentstack.com/cve/CVE-2026-26104"><img src="https://tridentstack.com/cve/badge/CVE-2026-26104.svg" alt="CVE-2026-26104"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-03-25.