It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade polkitUpgrade polkit-docsUpgrade polkit-libsUpgrade polkit-devel | May 4, 2022 | Feb 16, 2022 |
| Alpine Linux | — | Upgrade polkit | Mar 21, 2024 | Feb 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 16, 2022 |
| Centos_linux | — | Upgrade polkit-debuginfoUpgrade polkit-libsUpgrade polkit-docsUpgrade polkitUpgrade polkit-libs-debuginfoUpgrade polkit-debugsourceUpgrade polkit-devel | Jun 4, 2021 | Jun 3, 2021 |
| Debian | — | Upgrade policykit-1 | Jul 30, 2024 | Feb 16, 2022 |
| Freebsd | — | Upgrade polkit | Nov 4, 2022 | Jun 4, 2021 |
| Gentoo Linux | — | Upgrade sys-auth/polkit. | Jul 14, 2021 | Jul 13, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade polkit-docsUpgrade polkit-libsUpgrade polkitUpgrade polkit-devel | Aug 10, 2021 | Aug 9, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade polkitUpgrade polkit-libs | Sep 29, 2021 | Aug 9, 2021 |
| Oracle Solaris | — | Upgrade system/library/polkit to version 0.116-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Jul 21, 2021 |
| Oracle_linux | — | Upgrade polkit-libsUpgrade polkit-develUpgrade polkit-docsUpgrade polkit | Jun 4, 2021 | Jun 3, 2021 |
| Redhat Openshift | — | Upgrade openshift-kuryrUpgrade openshift-clientsUpgrade cri-oUpgrade polkitUpgrade dhcp | Nov 10, 2021 | Jun 3, 2021 |
| Redhat_linux | — | Upgrade polkit-libs-debuginfoUpgrade polkit-debugsourceUpgrade polkit-develUpgrade polkitUpgrade polkit-debuginfoUpgrade polkit-libsUpgrade polkit-docs | Jun 4, 2021 | Jun 3, 2021 |
| Rocky_linux | — | Upgrade polkitUpgrade polkit-debuginfoUpgrade polkit-debugsourceUpgrade polkit-libs-debuginfoUpgrade polkit-develUpgrade polkit-libs | May 5, 2022 | Feb 16, 2022 |
| Suse | — | Upgrade polkit-develUpgrade polkitUpgrade libpolkit-gobject-1-0Upgrade pkexecUpgrade libpolkit-agent-1-0Upgrade polkit-docUpgrade typelib-1_0-polkit-1_0Upgrade libpolkit0-32bitUpgrade libpolkit0 | Jun 4, 2021 | Jun 3, 2021 |
| Ubuntu | — | Upgrade policykit-1Upgrade libpolkit-gobject-1-0Upgrade libpolkit-agent-1-0 | Jun 4, 2021 | Jun 3, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub