Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-85498: A flaw was found in polkit. A regression in the fix for CVE-2026-4897 introduced a stack buffer underflow (out-of-bounds read) in the read_cookie() function of the polkit-agent-helper-1 setuid helper. When an empty cookie is read from standard input, the string-length computation underflows and one byte is read outside the bounds of the stack buffer.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | polkit | 0:125-1.amzn2023.0.4 |
| Amazon Linux · 2023 | polkit-debuginfo | 0:125-1.amzn2023.0.4 |
| Amazon Linux · 2023 | polkit-debugsource | 0:125-1.amzn2023.0.4 |
| Amazon Linux · 2023 | polkit-devel | 0:125-1.amzn2023.0.4 |
| Amazon Linux · 2023 | polkit-docs | 0:125-1.amzn2023.0.4 |
| Amazon Linux · 2023 | polkit-libs | 0:125-1.amzn2023.0.4 |
| Amazon Linux · 2023 | polkit-libs-debuginfo | 0:125-1.amzn2023.0.4 |
Vulnerabilities 1
-
Low 3.5
Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow
A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-85498.html