The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade policykit-1 | Jul 30, 2024 | Oct 26, 2015 |
| Freebsd | — | Upgrade polkit | Dec 10, 2025 | Jan 8, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade polkitUpgrade polkit-develUpgrade polkit-docs | Dec 4, 2019 | Oct 26, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade polkitUpgrade polkit-develUpgrade polkit-docs | Apr 16, 2020 | Oct 26, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade polkit-docsUpgrade polkitUpgrade polkit-devel | Nov 19, 2019 | Oct 26, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 29, 2015 |
| Suse | — | Upgrade libpolkit0Upgrade typelib-1_0-Polkit-1_0Upgrade libpolkit0-32bitUpgrade polkit-develUpgrade polkit | Dec 18, 2015 | Oct 26, 2015 |
| Ubuntu | — | Upgrade libpolkit-backend-1-0 | Jul 26, 2018 | Oct 26, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub