There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-polkitalma-upgrade-polkit-develalma-upgrade-polkit-docsalma-upgrade-polkit-libs | May 4, 2022 | Feb 21, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-polkitamazon-linux-2023-upgrade-polkit-debuginfoamazon-linux-2023-upgrade-polkit-debugsourceamazon-linux-2023-upgrade-polkit-develamazon-linux-2023-upgrade-polkit-docsamazon-linux-2023-upgrade-polkit-libsamazon-linux-2023-upgrade-polkit-libs-debuginfo | Feb 17, 2025 | Feb 14, 2022 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 21, 2022 | |
| Centos_linux | — | centos-upgrade-polkitcentos-upgrade-polkit-debuginfocentos-upgrade-polkit-debugsourcecentos-upgrade-polkit-develcentos-upgrade-polkit-docscentos-upgrade-polkit-libscentos-upgrade-polkit-libs-debuginfo | Apr 29, 2022 | Feb 21, 2022 |
| Debian | debian-upgrade-policykit-1 | Jul 30, 2024 | Feb 21, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-polkithuawei-euleros-2_0_sp10-upgrade-polkit-libs | Jun 7, 2022 | Feb 21, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-polkithuawei-euleros-2_0_sp8-upgrade-polkit-develhuawei-euleros-2_0_sp8-upgrade-polkit-docshuawei-euleros-2_0_sp8-upgrade-polkit-libs | Apr 26, 2022 | Feb 21, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-polkithuawei-euleros-2_0_sp9-upgrade-polkit-libs | Jun 16, 2022 | Feb 21, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-polkitoracle-linux-upgrade-polkit-develoracle-linux-upgrade-polkit-docsoracle-linux-upgrade-polkit-libs | Apr 28, 2022 | Feb 14, 2022 |
| Redhat_linux | redhat-upgrade-polkitredhat-upgrade-polkit-debuginforedhat-upgrade-polkit-debugsourceredhat-upgrade-polkit-develredhat-upgrade-polkit-docsredhat-upgrade-polkit-libsredhat-upgrade-polkit-libs-debuginfo | Apr 29, 2022 | Feb 21, 2022 | |
| Rocky_linux | rocky-upgrade-polkitrocky-upgrade-polkit-debuginforocky-upgrade-polkit-debugsourcerocky-upgrade-polkit-develrocky-upgrade-polkit-libsrocky-upgrade-polkit-libs-debuginfo | May 5, 2022 | Feb 21, 2022 | |
| Suse | — | suse-upgrade-libpolkit-agent-1-0suse-upgrade-libpolkit-gobject-1-0suse-upgrade-libpolkit0suse-upgrade-libpolkit0-32bitsuse-upgrade-pkexecsuse-upgrade-polkitsuse-upgrade-polkit-develsuse-upgrade-polkit-docsuse-upgrade-typelib-1_0-polkit-1_0 | Feb 19, 2022 | Feb 19, 2022 |
| Ubuntu | ubuntu-upgrade-policykit-1 | Mar 22, 2023 | Feb 21, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub