Udisks Daemon Out-of-Bounds Read Vulnerability Allowing Privilege Escalation

A vulnerability exists in the Udisks daemon that permits unprivileged users to create loop devices through the D-BUS system. This issue arises because the loop device handler, which processes D-BUS requests, fails to properly validate the lower bound of an index parameter, allowing negative values. Exploitation of this flaw can lead to a crash of the Udisks daemon or facilitate local privilege escalation by accessing files owned by privileged users.

Impact

Exploitation of this vulnerability can cause a segmentation fault, crashing the Udisks daemon. Additionally, it can be exploited for local privilege escalation, allowing access to files owned by privileged users.