CVE-2019-6133: Race Condition
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
Other sources
polkit has a vulnerability that allows a local attacker to hijack a PID during an authentication attempt by a non-root user and subsequently execute code as the authenticated process.
Upstream patch:
https://gitlab.freedesktop.org/polkit/polkit/commit/c898fdf4b1aafaa04f8ada9d73d77c8bb76e2f81 https://gitlab.freedesktop.org/polkit/polkit/mergerequests/19 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7b55851367136b1efd84d98fea81ba57a98304cf
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.7-1Fixed in 7.1.8-1 - Upgrade
Upgrade
debian/policykit-1to a version that resolves this vulnerability.Fixed in 0.105-31+deb11u1Fixed in 0.105-31+deb11u2Fixed in 122-3Fixed in 126-2Fixed in 127-3
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6133?
CVE-2019-6133 has been rated as a high severity vulnerability due to its potential to bypass authorization mechanisms.
How do I fix CVE-2019-6133?
To fix CVE-2019-6133, update to the patched versions of PolicyKit or Linux packages that address this vulnerability.
What systems are affected by CVE-2019-6133?
CVE-2019-6133 affects various Linux distributions using PolicyKit version 0.115 and specific Linux kernel versions.
What type of vulnerability is CVE-2019-6133?
CVE-2019-6133 is an authorization bypass vulnerability that exploits race conditions in the PolicyKit framework.
Is CVE-2019-6133 exploitable remotely?
CVE-2019-6133 is primarily a local privilege escalation vulnerability and is not typically exploitable remotely.