In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade polkit | Dec 27, 2019 | Jan 11, 2019 |
| Amazon Linux Ami 2 | — | Upgrade polkitUpgrade polkit-develUpgrade polkit-docsUpgrade polkit-debuginfo | Apr 27, 2020 | Jan 11, 2019 |
| Centos_linux | — | Upgrade polkit-develUpgrade polkit-desktop-policyUpgrade polkitUpgrade polkit-docsUpgrade polkit-debuginfo | Feb 28, 2019 | Jan 11, 2019 |
| Debian | — | Upgrade policykit-1Upgrade linux | Feb 14, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headers | Apr 2, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade polkit-docsUpgrade polkit-libsUpgrade polkitUpgrade polkit-devel | Jun 27, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 1, 2019 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade polkit-desktop-policyUpgrade polkit-debuginfoUpgrade polkit-docsUpgrade polkit-develUpgrade polkit | Feb 1, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade libpolkit0-32bitUpgrade polkitUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade polkit-docUpgrade dlm-kmp-defaultUpgrade polkit-develUpgrade typelib-1_0-Polkit-1_0Upgrade libpolkit0Upgrade kernel-default | Aug 2, 2019 | Jan 11, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1077-awsUpgrade linux-image-4.15.0-1040-azureUpgrade linux-image-4.18.0-16-genericUpgrade linux-image-4.4.0-143-powerpc64-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1041-kvmUpgrade linux-image-3.13.0-166-powerpc-smpUpgrade linux-image-4.15.0-46-genericUpgrade linux-image-4.15.0-1009-oracleUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1104-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1030-kvmUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.18.0-1013-azureUpgrade linux-image-4.4.0-143-genericUpgrade linux-image-powerpc-smpUpgrade policykit-1Upgrade linux-image-4.18.0-1010-raspi2Upgrade linux-image-4.4.0-1039-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1033-awsUpgrade linux-image-4.4.0-143-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-46-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade libpolkit-backend-1-0Upgrade linux-image-generic-lts-trustyUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-3.13.0-166-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1034-oemUpgrade linux-image-gkeUpgrade linux-image-3.13.0-166-generic-lpaeUpgrade linux-image-4.4.0-1108-snapdragonUpgrade linux-image-oracleUpgrade linux-image-3.13.0-166-genericUpgrade linux-image-3.13.0-166-powerpc64-embUpgrade linux-image-3.13.0-166-powerpc-e500Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-1007-gcpUpgrade linux-image-4.4.0-143-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-143-powerpc-smpUpgrade linux-image-4.18.0-1008-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-16-generic-lpaeUpgrade linux-image-4.15.0-46-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-166-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-4.18.0-16-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-143-powerpc64-embUpgrade linux-image-4.4.0-143-lowlatencyUpgrade linux-image-3.13.0-166-lowlatencyUpgrade linux-image-4.18.0-16-lowlatencyUpgrade linux-image-4.15.0-1032-raspi2Upgrade linux-image-4.15.0-46-lowlatencyUpgrade linux-image-4.15.0-1028-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenial | Mar 13, 2019 | Jan 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub