Summary
It was discovered that the PolicyKit pkexec tool incorrectly handled
command-line arguments. A local attacker could use this issue to escalate
privileges to an administrator.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | policykit-1 | 0.105-20ubuntu0.18.04.6 |
| Ubuntu · 20.04 LTS 20.04:LTS | policykit-1 | 0.105-26ubuntu1.2 |
Vulnerabilities 1
-
High 7.8
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…
KEV Jun 27, 2022
References
-
report
https://ubuntu.com/security/CVE-2021-4034