REDHAT-BUG-2025869
First published: Tue Nov 23 2021(Updated: )
A Local Privilege Escalation vulnerability (from any user to root) was found in polkit's pkexec, a SUID-root program that is installed by default on every major Linux distribution.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| polkit |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2045563
- https://gitlab.freedesktop.org/polkit/polkit/-/commit/a2bf5c9c83b6ae46cbd5c779d3055bff81ded683
- https://access.redhat.com/errata/RHSA-2022:0265
- https://access.redhat.com/errata/RHSA-2022:0268
- https://access.redhat.com/errata/RHSA-2022:0266
- https://access.redhat.com/errata/RHSA-2022:0267
- https://access.redhat.com/errata/RHSA-2022:0269
- https://access.redhat.com/errata/RHSA-2022:0270
- https://access.redhat.com/errata/RHSA-2022:0272
- https://access.redhat.com/errata/RHSA-2022:0271
- https://access.redhat.com/errata/RHSA-2022:0273
- https://access.redhat.com/errata/RHSA-2022:0274
- https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2046038
- https://access.redhat.com/errata/RHSA-2022:0443
- https://access.redhat.com/errata/RHSA-2022:0540
- https://access.redhat.com/security/cve/cve-2021-4034
- https://bugzilla.redhat.com/show_bug.cgi?id=2025869
Frequently Asked Questions
What is the severity of REDHAT-BUG-2025869?
The severity of REDHAT-BUG-2025869 is considered high due to its potential for local privilege escalation from any user to root.
How do I fix REDHAT-BUG-2025869?
To fix REDHAT-BUG-2025869, update the polkit package to the latest version provided by your Linux distribution's repositories.
Which systems are affected by REDHAT-BUG-2025869?
All major Linux distributions that include the polkit's pkexec application are affected by REDHAT-BUG-2025869.
What kind of vulnerability is REDHAT-BUG-2025869?
REDHAT-BUG-2025869 is a Local Privilege Escalation vulnerability affecting the pkexec component of polkit.
What is polkit's pkexec and its role in REDHAT-BUG-2025869?
Polkit's pkexec is a SUID-root program that allows users to execute commands as another user, and it is the component exploited in REDHAT-BUG-2025869.
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/description
- agent/event
- agent/source
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-4034
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/polkit
- canonical/polkit