CVE-2021-4115
Fixed in a distro release EPSS <1%
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned
Products: polkit_project polkit, redhat enterprise_linux, fedoraproject fedora, canonical ubuntu_linux, debian_linux, oracle zfs_storage_appliance_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | polkit | 0.115-13.el8_5.2 |
| AlmaLinux 8 | polkit-devel | 0.115-13.el8_5.2 |
| AlmaLinux 8 | polkit-docs | 0.115-13.el8_5.2 |
| AlmaLinux 8 | polkit-libs | 0.115-13.el8_5.2 |
| Amazon Linux 2023 | polkit | 0.117-10.amzn2023.0.3 |
| Amazon Linux 2023 | polkit-devel | 0.117-10.amzn2023.0.3 |
| Amazon Linux 2023 | polkit-docs | 0.117-10.amzn2023.0.3 |
| Amazon Linux 2023 | polkit-libs | 0.117-10.amzn2023.0.3 |
| Arch Linux | polkit | 0.120-5 |
| Debian 12 | policykit-1 | 0.105-32 |
| Debian 13 | policykit-1 | 0.105-32 |
| Debian 14 | policykit-1 | 0.105-32 |
| Red Hat Enterprise Linux 8 | polkit | 0:0.115-13.el8_5.2 |
| Red Hat Enterprise Linux 8 | polkit-debuginfo | 0:0.115-13.el8_5.2 |
| Red Hat Enterprise Linux 8 | polkit-debugsource | 0:0.115-13.el8_5.2 |
| Red Hat Enterprise Linux 8 | polkit-devel | 0:0.115-13.el8_5.2 |
| Red Hat Enterprise Linux 8 | polkit-docs | 0:0.115-13.el8_5.2 |
| Red Hat Enterprise Linux 8 | polkit-libs | 0:0.115-13.el8_5.2 |
| Red Hat Enterprise Linux 8 | polkit-libs-debuginfo | 0:0.115-13.el8_5.2 |
| Rocky Linux 8 | polkit | 0:0.115-13.el8_5.2 |
| SUSE Enterprise Storage 7 | polkit | 0.116-3.9.1 |
| SUSE Linux Enterprise Micro 5.0 | polkit | 0.116-3.9.1 |
| SUSE Linux Enterprise Micro 5.1 | polkit | 0.116-3.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | polkit | 0.116-3.9.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | polkit | 0.116-3.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | polkit | 0.113-5.27.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | polkit | 0.116-3.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | polkit | 0.113-5.27.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | polkit | 0.116-3.9.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | polkit | 0.113-5.27.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | polkit | 0.113-5.27.1 |
| Ubuntu 20.04 LTS | policykit-1 | 0.105-26ubuntu1.3 |
| openSUSE Leap 15.3 | polkit | 0.116-3.9.1 |
| openSUSE Tumbleweed | polkit | 0.120-3.1 |