Missing authorization (polkit) vulnerability in the org.freedesktop.UDisks2.Block.RestoreEncryptedHeader D-Bus method of udisks. The flaw is caused by the absence of a call to udisks_daemon_util_check_authorization_sync() in the handle_restore_encrypted_header() handler. As a result, any local unprivileged user can invoke this system-bus method and cause the root-privileged udisks daemon to call bd_crypto_luks_header_restore() on an arbitrary block device. This enables destructive overwriting of LUKS headers and keyslots without authentication or user interaction, leading to permanent loss of access to encrypted data and a denial-of-service condition.