KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and "PID reuse race conditions."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade polkit-qt-docUpgrade polkit-qtUpgrade polkit-qt-devel | Dec 1, 2016 | Aug 19, 2014 |
| Freebsd | — | Upgrade kdelibs | Dec 10, 2025 | Jul 31, 2014 |
| Oracle_linux | — | Upgrade polkit-qt-develUpgrade polkit-qtUpgrade polkit-qt-doc | Oct 16, 2024 | Aug 19, 2014 |
| Suse | — | Upgrade kdelibs4-doc-debuginfoUpgrade libkdecore4-debuginfoUpgrade kdelibs4-coreUpgrade kdebase4-workspace-liboxygenstyleUpgrade libksuseinstall-develUpgrade kdebase4-workspace-plasma-calendarUpgrade kdebase4-workspace-plasma-calendar-debuginfoUpgrade kdebase4-workspace-ksysguardd-debuginfoUpgrade kwin-debuginfoUpgrade libkdecore4Upgrade kdelibs4Upgrade kwinUpgrade kdmUpgrade kdebase4-workspace-branding-upstreamUpgrade libkde4Upgrade kdelibs4-core-debuginfoUpgrade libksuseinstall1-debuginfoUpgrade kdebase4-workspace-devel-debuginfoUpgrade kdm-branding-upstreamUpgrade kdelibs4-debuginfoUpgrade libksuseinstall1Upgrade kdebase4-workspace-ksysguarddUpgrade libkdecore4-32bitUpgrade kde4-kgreeter-pluginsUpgrade libksuseinstall1-debuginfo-32bitUpgrade krandr-debuginfoUpgrade kdebase4-workspace-liboxygenstyle-debuginfoUpgrade libkdecore4-develUpgrade libkde4-debuginfo-32bitUpgrade libkde4-develUpgrade kde4-kgreeter-plugins-debuginfoUpgrade kdelibs4-branding-upstreamUpgrade kdebase4-workspace-liboxygenstyle-debuginfo-32bitUpgrade libkdecore4-debuginfo-32bitUpgrade kdebase4-workspace-develUpgrade kdm-debuginfoUpgrade kdebase4-workspace-debugsourceUpgrade kdebase4-workspace-liboxygenstyle-32bitUpgrade krandrUpgrade kdebase4-workspace-debuginfoUpgrade kdebase4-workspaceUpgrade libkdecore4-devel-debuginfoUpgrade libksuseinstall1-32bitUpgrade libkde4-32bitUpgrade libkde4-debuginfoUpgrade kdelibs4-docUpgrade kdelibs4-debugsourceUpgrade kdelibs4-apidocsUpgrade python-kdebase4 | Dec 18, 2015 | Aug 11, 2014 |
| Ubuntu | — | Upgrade kdelibs5-plugins | Nov 8, 2024 | Aug 19, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub