There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade polkit-libsUpgrade polkit-develUpgrade polkitUpgrade polkit-docs | May 4, 2022 | Feb 21, 2022 |
| Amazon_linux_2023 | — | Upgrade polkit-docsUpgrade polkitUpgrade polkit-debugsourceUpgrade polkit-develUpgrade polkit-libsUpgrade polkit-libs-debuginfoUpgrade polkit-debuginfo | Feb 17, 2025 | Feb 14, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 21, 2022 |
| Centos_linux | — | Upgrade polkitUpgrade polkit-debugsourceUpgrade polkit-develUpgrade polkit-libsUpgrade polkit-docsUpgrade polkit-debuginfoUpgrade polkit-libs-debuginfo | Apr 29, 2022 | Feb 21, 2022 |
| Debian | — | Upgrade policykit-1 | Jul 30, 2024 | Feb 21, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade polkit-libsUpgrade polkit | Jun 7, 2022 | Feb 21, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade polkit-libsUpgrade polkit-develUpgrade polkitUpgrade polkit-docs | Apr 26, 2022 | Feb 21, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade polkit-libsUpgrade polkit | Jun 16, 2022 | Feb 21, 2022 |
| Oracle_linux | — | Upgrade polkitUpgrade polkit-libsUpgrade polkit-docsUpgrade polkit-devel | Apr 28, 2022 | Feb 14, 2022 |
| Redhat_linux | — | Upgrade polkit-develUpgrade polkit-libs-debuginfoUpgrade polkit-libsUpgrade polkitUpgrade polkit-debugsourceUpgrade polkit-debuginfoUpgrade polkit-docs | Apr 29, 2022 | Feb 21, 2022 |
| Rocky_linux | — | Upgrade polkit-libs-debuginfoUpgrade polkit-libsUpgrade polkit-debuginfoUpgrade polkit-develUpgrade polkit-debugsourceUpgrade polkit | May 5, 2022 | Feb 21, 2022 |
| Suse | — | Upgrade typelib-1_0-polkit-1_0Upgrade polkit-develUpgrade libpolkit0-32bitUpgrade polkit-docUpgrade libpolkit-gobject-1-0Upgrade libpolkit0Upgrade polkitUpgrade pkexecUpgrade libpolkit-agent-1-0 | Feb 19, 2022 | Feb 19, 2022 |
| Ubuntu | — | Upgrade policykit-1 | Mar 22, 2023 | Feb 21, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub