Search
Find a vulnerability
Search criteria
Related vulnerabilities
OESA-2026-4000 (CVE-2026-85498)
Vulnerability from osv_openeuler – Published: 2026-09-20 13:24 – Updated: 2026-09-20 13:24 – Source website
VLAI
Summary
polkit security update
Details
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security Fix(es):
A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)
Severity
4.6 (Medium)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"polkit-0.116-13.oe2003sp4.aarch64.rpm",
"polkit-debuginfo-0.116-13.oe2003sp4.aarch64.rpm",
"polkit-debugsource-0.116-13.oe2003sp4.aarch64.rpm",
"polkit-devel-0.116-13.oe2003sp4.aarch64.rpm",
"polkit-libs-0.116-13.oe2003sp4.aarch64.rpm"
],
"noarch": [
"polkit-help-0.116-13.oe2003sp4.noarch.rpm"
],
"src": [
"polkit-0.116-13.oe2003sp4.src.rpm"
],
"x86_64": [
"polkit-0.116-13.oe2003sp4.x86_64.rpm",
"polkit-debuginfo-0.116-13.oe2003sp4.x86_64.rpm",
"polkit-debugsource-0.116-13.oe2003sp4.x86_64.rpm",
"polkit-devel-0.116-13.oe2003sp4.x86_64.rpm",
"polkit-libs-0.116-13.oe2003sp4.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:20.03-LTS-SP4",
"name": "polkit",
"purl": "pkg:rpm/openEuler/polkit\u0026distro=openEuler-20.03-LTS-SP4"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.116-13.oe2003sp4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "Medium"
},
"details": "polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)",
"id": "OESA-2026-4000",
"modified": "2026-09-20T13:24:00Z",
"published": "2026-09-20T13:24:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4000"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85498"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "polkit security update",
"upstream": [
"CVE-2026-85498"
]
}
OESA-2026-4001 (CVE-2026-85498)
Vulnerability from osv_openeuler – Published: 2026-09-20 13:24 – Updated: 2026-09-20 13:24 – Source website
VLAI
Summary
polkit security update
Details
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security Fix(es):
A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)
Severity
4.6 (Medium)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"polkit-0.120-13.oe2203sp4.aarch64.rpm",
"polkit-debuginfo-0.120-13.oe2203sp4.aarch64.rpm",
"polkit-debugsource-0.120-13.oe2203sp4.aarch64.rpm",
"polkit-devel-0.120-13.oe2203sp4.aarch64.rpm",
"polkit-libs-0.120-13.oe2203sp4.aarch64.rpm"
],
"noarch": [
"polkit-help-0.120-13.oe2203sp4.noarch.rpm"
],
"src": [
"polkit-0.120-13.oe2203sp4.src.rpm"
],
"x86_64": [
"polkit-0.120-13.oe2203sp4.x86_64.rpm",
"polkit-debuginfo-0.120-13.oe2203sp4.x86_64.rpm",
"polkit-debugsource-0.120-13.oe2203sp4.x86_64.rpm",
"polkit-devel-0.120-13.oe2203sp4.x86_64.rpm",
"polkit-libs-0.120-13.oe2203sp4.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:22.03-LTS-SP4",
"name": "polkit",
"purl": "pkg:rpm/openEuler/polkit\u0026distro=openEuler-22.03-LTS-SP4"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.120-13.oe2203sp4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "Medium"
},
"details": "polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)",
"id": "OESA-2026-4001",
"modified": "2026-09-20T13:24:01Z",
"published": "2026-09-20T13:24:01Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4001"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85498"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "polkit security update",
"upstream": [
"CVE-2026-85498"
]
}
OESA-2026-4002 (CVE-2026-85498)
Vulnerability from osv_openeuler – Published: 2026-09-20 13:24 – Updated: 2026-09-20 13:24 – Source website
VLAI
Summary
polkit security update
Details
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security Fix(es):
A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)
Severity
4.6 (Medium)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"polkit-123-5.oe2403sp1.aarch64.rpm",
"polkit-debuginfo-123-5.oe2403sp1.aarch64.rpm",
"polkit-debugsource-123-5.oe2403sp1.aarch64.rpm",
"polkit-devel-123-5.oe2403sp1.aarch64.rpm",
"polkit-libs-123-5.oe2403sp1.aarch64.rpm"
],
"noarch": [
"polkit-help-123-5.oe2403sp1.noarch.rpm"
],
"src": [
"polkit-123-5.oe2403sp1.src.rpm"
],
"x86_64": [
"polkit-123-5.oe2403sp1.x86_64.rpm",
"polkit-debuginfo-123-5.oe2403sp1.x86_64.rpm",
"polkit-debugsource-123-5.oe2403sp1.x86_64.rpm",
"polkit-devel-123-5.oe2403sp1.x86_64.rpm",
"polkit-libs-123-5.oe2403sp1.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP1",
"name": "polkit",
"purl": "pkg:rpm/openEuler/polkit\u0026distro=openEuler-24.03-LTS-SP1"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "123-5.oe2403sp1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "Medium"
},
"details": "polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)",
"id": "OESA-2026-4002",
"modified": "2026-09-20T13:24:01Z",
"published": "2026-09-20T13:24:01Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4002"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85498"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "polkit security update",
"upstream": [
"CVE-2026-85498"
]
}
OESA-2026-4003 (CVE-2026-85498)
Vulnerability from osv_openeuler – Published: 2026-09-20 13:24 – Updated: 2026-09-20 13:24 – Source website
VLAI
Summary
polkit security update
Details
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security Fix(es):
A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)
Severity
4.6 (Medium)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"polkit-123-5.oe2403sp3.aarch64.rpm",
"polkit-debuginfo-123-5.oe2403sp3.aarch64.rpm",
"polkit-debugsource-123-5.oe2403sp3.aarch64.rpm",
"polkit-devel-123-5.oe2403sp3.aarch64.rpm",
"polkit-libs-123-5.oe2403sp3.aarch64.rpm"
],
"noarch": [
"polkit-help-123-5.oe2403sp3.noarch.rpm"
],
"src": [
"polkit-123-5.oe2403sp3.src.rpm"
],
"x86_64": [
"polkit-123-5.oe2403sp3.x86_64.rpm",
"polkit-debuginfo-123-5.oe2403sp3.x86_64.rpm",
"polkit-debugsource-123-5.oe2403sp3.x86_64.rpm",
"polkit-devel-123-5.oe2403sp3.x86_64.rpm",
"polkit-libs-123-5.oe2403sp3.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP3",
"name": "polkit",
"purl": "pkg:rpm/openEuler/polkit\u0026distro=openEuler-24.03-LTS-SP3"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "123-5.oe2403sp3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "Medium"
},
"details": "polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)",
"id": "OESA-2026-4003",
"modified": "2026-09-20T13:24:02Z",
"published": "2026-09-20T13:24:02Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4003"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85498"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "polkit security update",
"upstream": [
"CVE-2026-85498"
]
}
RHSA-2026:66287
Vulnerability from csaf_redhat - Published: 2026-09-10 01:41 - Updated: 2026-09-10 17:23Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Moderate
Scope
2 vulnerabilities in this advisory, including CVE-2026-85498.
CVE-2026-85498
No description is available for this CVE.
Fixed: 4 products
https://access.redhat.com/errata/RHSA-2026:66287
UBUNTU-CVE-2026-85498 (CVE-2026-85498)
Vulnerability from osv_ubuntu – Published: 2026-09-07 00:00 – Updated: 2026-09-15 17:56 – Source website
VLAI
Details
[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]
Severity
N/A (UNKNOWN)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
},
{
"binary_name": "libpolkit-backend-1-0",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-4ubuntu3.14.04.6+esm1?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-3ubuntu3",
"0.105-4ubuntu1",
"0.105-4ubuntu2",
"0.105-4ubuntu2.14.04.1",
"0.105-4ubuntu3.14.04.1",
"0.105-4ubuntu3.14.04.2",
"0.105-4ubuntu3.14.04.5",
"0.105-4ubuntu3.14.04.6",
"0.105-4ubuntu3.14.04.6+esm1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
},
{
"binary_name": "libpolkit-backend-1-0",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-14.1ubuntu0.5+esm1?arch=source\u0026distro=esm-infra/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-11ubuntu2",
"0.105-13",
"0.105-13ubuntu1",
"0.105-14",
"0.105-14.1",
"0.105-14.1ubuntu0.1",
"0.105-14.1ubuntu0.4",
"0.105-14.1ubuntu0.5",
"0.105-14.1ubuntu0.5+esm1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-20ubuntu0.18.04.6"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-20ubuntu0.18.04.6"
},
{
"binary_name": "libpolkit-backend-1-0",
"binary_version": "0.105-20ubuntu0.18.04.6"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-20ubuntu0.18.04.6"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-20ubuntu0.18.04.6"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-20ubuntu0.18.04.6?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-18",
"0.105-20",
"0.105-20ubuntu0.18.04.1",
"0.105-20ubuntu0.18.04.4",
"0.105-20ubuntu0.18.04.5",
"0.105-20ubuntu0.18.04.6"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-26ubuntu1.3"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-26ubuntu1.3"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-26ubuntu1.3"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-26ubuntu1.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-26ubuntu1.3?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-26ubuntu1",
"0.105-26ubuntu1.1",
"0.105-26ubuntu1.2",
"0.105-26ubuntu1.3"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "pkexec",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "polkitd",
"binary_version": "0.105-33ubuntu0.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-33ubuntu0.2?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.105-33ubuntu0.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-31",
"0.105-31ubuntu1",
"0.105-31.1",
"0.105-32",
"0.105-33",
"0.105-33ubuntu0.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "pkexec",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "policykit-1",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "polkitd",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "polkitd-pkla",
"binary_version": "124-2ubuntu1.24.04.4"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@124-2ubuntu1.24.04.4?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "124-2ubuntu1.24.04.4"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"123-1",
"123-3",
"124-1",
"124-1ubuntu1",
"124-2ubuntu1",
"124-2ubuntu1.24.04.2",
"124-2ubuntu1.24.04.3"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "127-2ubuntu1.1"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "127-2ubuntu1.1"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "127-2ubuntu1.1"
},
{
"binary_name": "pkexec",
"binary_version": "127-2ubuntu1.1"
},
{
"binary_name": "polkitd",
"binary_version": "127-2ubuntu1.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@127-2ubuntu1.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "127-2ubuntu1.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"126-2",
"127-1",
"127-2",
"127-2ubuntu1"
]
}
],
"aliases": [],
"details": "[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]",
"id": "UBUNTU-CVE-2026-85498",
"modified": "2026-09-15T17:56:38Z",
"published": "2026-09-07T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-85498"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85498"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8762-1"
}
],
"related": [
"USN-8762-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-85498"
]
}