Introduction
CVE-2025-8067 is a critical flaw in the UDisks daemon, a core storage management component present on most modern Linux distributions. By exploiting an out-of-bounds read through the D-BUS interface, an unprivileged user can crash the daemon or potentially escalate privileges. On Linux systems, either outcome can have immediate operational consequences for enterprises and end users alike.
UDisks is a widely deployed service that provides storage management through a D-BUS API. It ships by default on many Linux distributions, so a vulnerability in it reaches both desktop and server environments.
Technical Information
CVE-2025-8067 is an out-of-bounds read vulnerability (CWE-125) in the UDisks daemon's loop device handler. The handler processes D-BUS requests to create loop devices. Each request carries two parameters: a file descriptor list, and an index that specifies which file to use as the loop device backing file. The function correctly checks that the index does not exceed a maximum allowed value, but it does not check whether the index is negative.
Because of this incomplete validation, an attacker with local access can send a crafted D-BUS message with a negative index. When the daemon processes the request, it reads out of bounds. The result can be a crash (denial of service) or, in some cases, local privilege escalation through access to files owned by privileged users. The attack runs entirely through the D-BUS system interface and does not require remote access.
No public code snippets or proof of concept are available for this vulnerability. The root cause is the missing lower-bound check on the index parameter in the loop device handler's D-BUS interface.
Affected Systems and Versions
- UDisks daemon (public sources do not specify the exact affected versions)
- Any Linux distribution that ships a vulnerable UDisks version is potentially affected
- The vulnerability is present when unprivileged users can access the D-BUS system interface
Vendor Security History
Red Hat has a mature vulnerability management process. It has previously disclosed and coordinated fixes for similar UDisks vulnerabilities, including CVE-2025-6018 and CVE-2025-6019. Its advisories are detailed, and it generally responds promptly. Red Hat's security team has a reputation for responsible disclosure and upstream collaboration.
