There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade polkit-libsUpgrade polkit-develUpgrade polkitUpgrade polkit-docs | May 4, 2022 | Feb 21, 2022 |
| Amazon_linux_2023 | — | Upgrade polkit-docsUpgrade polkit-debugsourceUpgrade polkitUpgrade polkit-debuginfoUpgrade polkit-libs-debuginfoUpgrade polkit-libsUpgrade polkit-devel | Feb 17, 2025 | Feb 14, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 21, 2022 |
| Centos_linux | — | Upgrade polkit-develUpgrade polkitUpgrade polkit-libsUpgrade polkit-debugsourceUpgrade polkit-docsUpgrade polkit-debuginfoUpgrade polkit-libs-debuginfo | Apr 29, 2022 | Feb 21, 2022 |
| Debian | — | Upgrade policykit-1 | Jul 30, 2024 | Feb 21, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade polkitUpgrade polkit-libs | Jun 7, 2022 | Feb 21, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade polkit-libsUpgrade polkit-develUpgrade polkitUpgrade polkit-docs | Apr 26, 2022 | Feb 21, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade polkit-libsUpgrade polkit | Jun 16, 2022 | Feb 21, 2022 |
| Oracle_linux | — | Upgrade polkitUpgrade polkit-develUpgrade polkit-docsUpgrade polkit-libs | Apr 28, 2022 | Feb 14, 2022 |
| Redhat_linux | — | Upgrade polkit-develUpgrade polkit-libs-debuginfoUpgrade polkitUpgrade polkit-docsUpgrade polkit-debuginfoUpgrade polkit-debugsourceUpgrade polkit-libs | Apr 29, 2022 | Feb 21, 2022 |
| Rocky_linux | — | Upgrade polkit-debugsourceUpgrade polkit-develUpgrade polkit-libsUpgrade polkitUpgrade polkit-debuginfoUpgrade polkit-libs-debuginfo | May 5, 2022 | Feb 21, 2022 |
| Suse | — | Upgrade libpolkit0Upgrade polkit-docUpgrade pkexecUpgrade libpolkit-gobject-1-0Upgrade libpolkit-agent-1-0Upgrade polkitUpgrade polkit-develUpgrade libpolkit0-32bitUpgrade typelib-1_0-polkit-1_0 | Feb 19, 2022 | Feb 19, 2022 |
| Ubuntu | — | Upgrade policykit-1 | Mar 22, 2023 | Feb 21, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub