Affected: AlmaLinux:10: polkit, AlmaLinux:10: polkit-devel, AlmaLinux:10: polkit-docs, AlmaLinux:10: polkit-libs

The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.

Security Fix(es):

* polkit: Polkit: Denial of Service via unbounded input processing through standard input (CVE-2026-4897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.

Affected: openEuler:24.03-LTS-SP3: polkit, openEuler:20.03-LTS-SP4: polkit, openEuler:22.03-LTS-SP4: polkit, openEuler:24.03-LTS: polkit, openEuler:24.03-LTS-SP1: polkit, openEuler:24.03-LTS-SP2: polkit

polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fix(es):

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.(CVE-2026-4897)

libpolkit-agent-1-0-127-3.1 on GA media

polkit: Polkit: Denial of Service via unbounded input processing through standard input polkit: Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow

Affected: Rocky Linux:10: polkit

The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.

Security Fix(es):

* polkit: Polkit: Denial of Service via unbounded input processing through standard input (CVE-2026-4897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Security update for polkit

Affected: Ubuntu:Pro:14.04:LTS: policykit-1, Ubuntu:Pro:16.04:LTS: policykit-1, Ubuntu:18.04:LTS: policykit-1, Ubuntu:20.04:LTS: policykit-1, Ubuntu:22.04:LTS: policykit-1, Ubuntu:24.04:LTS: policykit-1, Ubuntu:25.10: policykit-1

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.

Ein lokaler Angreifer kann eine Schwachstelle in PolicyKit ausnutzen, um einen Denial of Service Angriff durchzuführen.