A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggered. This issue can lead to a crash or other unexpected behavior, and arbitrary code execution is not discarded. To exploit this flaw, a high-privilege account is needed as it's required to place the malicious policy file properly.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-polkitamazon-linux-ami-2-upgrade-polkit-debuginfoamazon-linux-ami-2-upgrade-polkit-develamazon-linux-ami-2-upgrade-polkit-docs | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-polkitamazon-linux-2023-upgrade-polkit-debuginfoamazon-linux-2023-upgrade-polkit-debugsourceamazon-linux-2023-upgrade-polkit-develamazon-linux-2023-upgrade-polkit-docsamazon-linux-2023-upgrade-polkit-libsamazon-linux-2023-upgrade-polkit-libs-debuginfo | Oct 16, 2025 | Jul 11, 2025 | |
| Debian | no-fix-debian-deb-package | Jul 16, 2025 | Jul 14, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-polkithuawei-euleros-2_0_sp10-upgrade-polkit-libs | Sep 15, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-polkithuawei-euleros-2_0_sp11-upgrade-polkit-libs | Oct 14, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-polkithuawei-euleros-2_0_sp12-upgrade-polkit-libs | Sep 15, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-polkithuawei-euleros-2_0_sp13-upgrade-polkit-libs | Oct 24, 2025 | Sep 9, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 14, 2025 | Jul 11, 2025 | |
| Suse | — | suse-upgrade-libpolkit-agent-1-0suse-upgrade-libpolkit-agent-1-0-32bitsuse-upgrade-libpolkit-gobject-1-0suse-upgrade-libpolkit-gobject-1-0-32bitsuse-upgrade-libpolkit0suse-upgrade-pkexecsuse-upgrade-polkitsuse-upgrade-polkit-develsuse-upgrade-polkit-docsuse-upgrade-typelib-1_0-polkit-1_0 | Aug 14, 2025 | Jul 25, 2025 |
| Ubuntu | ubuntu-upgrade-policykit-1ubuntu-upgrade-polkitd | Apr 15, 2026 | Jul 14, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | May 27, 2026 | Jul 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub