A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade PackageKit-yumUpgrade PackageKit-yum-pluginUpgrade PackageKit-glibUpgrade PackageKitUpgrade PackageKit-command-not-foundUpgrade PackageKit-gtk3-moduleUpgrade PackageKit-debuginfoUpgrade PackageKit-cronUpgrade PackageKit-gstreamer-pluginUpgrade PackageKit-glib-devel | Apr 2, 2025 | Jan 3, 2024 |
| Amazon_linux_2023 | — | Upgrade PackageKit-command-not-found-debuginfoUpgrade PackageKit-gtk3-moduleUpgrade PackageKit-gtk3-module-debuginfoUpgrade PackageKit-debugsourceUpgrade PackageKit-glib-debuginfoUpgrade PackageKit-command-not-foundUpgrade PackageKit-glibUpgrade PackageKit-debuginfoUpgrade PackageKitUpgrade PackageKit-glib-develUpgrade PackageKit-cron | May 19, 2026 | Jan 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 3, 2024 |
| Suse | — | Upgrade libyui-rest-api15Upgrade libyui-ncurses-toolsUpgrade libyui-qt-develUpgrade libyui-ncurses-rest-api15Upgrade libyui-qt-pkg-develUpgrade PackageKit-gstreamer-pluginUpgrade typelib-1_0-PackageKitGlib-1_0Upgrade libpackagekit-glib2-devel-32bitUpgrade PackageKit-backend-zyppUpgrade libpackagekit-glib2-18Upgrade libpackagekit-glib2-18-32bitUpgrade libyui-rest-api11Upgrade libyui-ncurses-rest-api-develUpgrade libyui-qt-rest-api15Upgrade zypperUpgrade libyui-ncurses-pkg11Upgrade libyui-qt-rest-api-develUpgrade yast2-pkg-bindingsUpgrade zypper-needs-restartingUpgrade libyui-qt-pkg11Upgrade libyui-ncurses15Upgrade PackageKit-gtk3-moduleUpgrade libyui-ncurses-develUpgrade libyui11Upgrade libyui-develUpgrade libyui-qt-graph15Upgrade libyui-ncurses-pkg15Upgrade libyui-rest-api-develUpgrade PackageKit-backend-dnfUpgrade libyui-qt-graph-develUpgrade libyui-ncurses-pkg-develUpgrade PackageKit-branding-upstreamUpgrade libpackagekit-glib2-develUpgrade PackageKit-develUpgrade libzyppUpgrade libyui-qt-pkg15Upgrade libyui-qt15Upgrade libyui15Upgrade PackageKitUpgrade libzypp-develUpgrade PackageKit-branding-SLEUpgrade zypper-logUpgrade PackageKit-lang | Mar 22, 2024 | Jan 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub