https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:07:27 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:59997 <p><strong>Affected:</strong> AlmaLinux:10: polkit, AlmaLinux:10: polkit-devel, AlmaLinux:10: polkit-docs, AlmaLinux:10: polkit-libs</p> <p>The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.</p> <p>Security Fix(es):</p> <p>* polkit: Polkit: Denial of Service via unbounded input processing through standard input (CVE-2026-4897)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: polkit, AlmaLinux:10: polkit-devel, AlmaLinux:10: polkit-docs, AlmaLinux:10: polkit-libs</p> <p>The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.</p> <p>Security Fix(es):</p> <p>* polkit: Polkit: Denial of Service via unbounded input processing through standard input (CVE-2026-4897)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:59997 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0414 certfr-2026-avi-0414 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0414 https://cve.radiocsirt.org/vuln/euvd-2026-366500 EUVD-2026-366500 https://cve.radiocsirt.org/vuln/euvd-2026-366500 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4897 <p>A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.</p> <p>A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4897 https://cve.radiocsirt.org/vuln/ghsa-v4jf-wwp4-588q <p>A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.</p> <p>A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.</p> https://cve.radiocsirt.org/vuln/ghsa-v4jf-wwp4-588q https://cve.radiocsirt.org/vuln/msrc_cve-2026-4897 msrc_CVE-2026-4897 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4897 https://cve.radiocsirt.org/vuln/oesa-2026-1814 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: polkit, openEuler:20.03-LTS-SP4: polkit, openEuler:22.03-LTS-SP4: polkit, openEuler:24.03-LTS: polkit, openEuler:24.03-LTS-SP1: polkit, openEuler:24.03-LTS-SP2: polkit</p> <p>polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fix(es):</p> <p>A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.(CVE-2026-4897)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: polkit, openEuler:20.03-LTS-SP4: polkit, openEuler:22.03-LTS-SP4: polkit, openEuler:24.03-LTS: polkit, openEuler:24.03-LTS-SP1: polkit, openEuler:24.03-LTS-SP2: polkit</p> <p>polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fix(es):</p> <p>A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.(CVE-2026-4897)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1814 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10453-1 <p>libpolkit-agent-1-0-127-3.1 on GA media</p> <p>libpolkit-agent-1-0-127-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10453-1 https://cve.radiocsirt.org/vuln/rhsa-2026:66287 <p>polkit: Polkit: Denial of Service via unbounded input processing through standard input polkit: Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow</p> <p>polkit: Polkit: Denial of Service via unbounded input processing through standard input polkit: Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow</p> https://cve.radiocsirt.org/vuln/rhsa-2026:66287 https://cve.radiocsirt.org/vuln/rlsa-2026:59997 <p><strong>Affected:</strong> Rocky Linux:10: polkit</p> <p>The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.</p> <p>Security Fix(es):</p> <p>* polkit: Polkit: Denial of Service via unbounded input processing through standard input (CVE-2026-4897)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: polkit</p> <p>The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.</p> <p>Security Fix(es):</p> <p>* polkit: Polkit: Denial of Service via unbounded input processing through standard input (CVE-2026-4897)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:59997 https://cve.radiocsirt.org/vuln/suse-su-2026:1425-1 <p>Security update for polkit</p> <p>Security update for polkit</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1425-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4897 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: policykit-1, Ubuntu:Pro:16.04:LTS: policykit-1, Ubuntu:18.04:LTS: policykit-1, Ubuntu:20.04:LTS: policykit-1, Ubuntu:22.04:LTS: policykit-1, Ubuntu:24.04:LTS: policykit-1, Ubuntu:25.10: policykit-1</p> <p>A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: policykit-1, Ubuntu:Pro:16.04:LTS: policykit-1, Ubuntu:18.04:LTS: policykit-1, Ubuntu:20.04:LTS: policykit-1, Ubuntu:22.04:LTS: policykit-1, Ubuntu:24.04:LTS: policykit-1, Ubuntu:25.10: policykit-1</p> <p>A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4897 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3021 <p>Ein lokaler Angreifer kann eine Schwachstelle in PolicyKit ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in PolicyKit ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3021