Summary
Kevin Backhouse discovered that PolicyKit incorrectly handled file
descriptors. A local attacker could possibly use this issue to cause
PolicyKit to crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | policykit-1 | 0.105-26ubuntu1.3 |
Vulnerabilities 1
-
Unscored —
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor…
References
-
report
https://ubuntu.com/security/CVE-2021-4115