Alerts This Week
Warning Icon 1 1,111
Alerts This Week
Warning Icon 1 1,111

Ubuntu 20.04, 18.04 USN-7578-2 critical: UDisks local privilege escalation

ubuntu
Calendar Grey June 18, 2025
Dist Ubuntu Esm H88
The CVE-2023-XXXX flaw in UDisks grants unauthorized users the potential to escalate their permissions on Ubuntu installations.
UDisks could be made to run programs as an administrator.

Summary

UDisks could be made to run programs as an administrator.

Software Description:

- udisks2: service to access and manipulate storage devices

Details:

USN-7578-1 fixed a vulnerability in UDisks. This update provides

the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that UDisks incorrectly handled mount options when

resizing certain filesystems. A local attacker with an active session on

the console can use this issue to escalate their privileges to root.

Topics%20covered

Topics Covered

security advisory critical local privilege escalation ubuntu udisks2 service vulnerability

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  libudisks2-0                    2.8.4-1ubuntu2+esm1
                                  Available with Ubuntu Pro
  udisks2                         2.8.4-1ubuntu2+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libudisks2-0                    2.7.6-3ubuntu0.2+esm1
                                  Available with Ubuntu Pro
  udisks2                         2.7.6-3ubuntu0.2+esm1
                                  Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-7578-2

https://ubuntu.com/security/notices/USN-7578-1

CVE-2025-6019

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7578-2

Topics%20covered

Topics Covered

security advisory critical local privilege escalation ubuntu udisks2 service vulnerability

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here