RHSA-2026:97463: Moderate: polkit security update

Q: What type of impact does this issue have?

The issue is a denial of service caused by unbounded processing of standard input. It affects polkit, which mediates communication between non-privileged and privileged processes.

Q: Which packages are included in this update?

The update covers polkit and related packages: polkit-debuginfo, polkit-debugsource, polkit-devel, polkit-libs, polkit-libs-debuginfo, and polkit-docs.

Published Nov 10, 2026

Updated

The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.Security Fix(es): polkit: Polkit: Denial of Service via unbounded input processing through standard input (CVE-2026-4897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

Affected Software

25 affected componentsFixes available

redhat/polkit<0.117-16.el9

0.117-16.el9

redhat/polkit<0.117-16.el9

0.117-16.el9

redhat/polkit-debuginfo<0.117-16.el9

0.117-16.el9

redhat/polkit-debuginfo<0.117-16.el9

0.117-16.el9

redhat/polkit-debugsource<0.117-16.el9

0.117-16.el9

redhat/polkit-debugsource<0.117-16.el9

0.117-16.el9

redhat/polkit-devel<0.117-16.el9

0.117-16.el9

redhat/polkit-devel<0.117-16.el9

0.117-16.el9

redhat/polkit-docs<0.117-16.el9

0.117-16.el9

redhat/polkit-libs<0.117-16.el9

0.117-16.el9

redhat/polkit-libs<0.117-16.el9

0.117-16.el9

redhat/polkit-libs-debuginfo<0.117-16.el9

0.117-16.el9

redhat/polkit-libs-debuginfo<0.117-16.el9

0.117-16.el9

redhat/polkit<0.117-16.el9

0.117-16.el9

redhat/polkit-debuginfo<0.117-16.el9

0.117-16.el9

redhat/polkit-debugsource<0.117-16.el9

0.117-16.el9

redhat/polkit-devel<0.117-16.el9

0.117-16.el9

redhat/polkit-libs<0.117-16.el9

0.117-16.el9

redhat/polkit-libs-debuginfo<0.117-16.el9

0.117-16.el9

redhat/polkit<0.117-16.el9.aa

0.117-16.el9.aa

redhat/polkit-debuginfo<0.117-16.el9.aa

0.117-16.el9.aa

redhat/polkit-debugsource<0.117-16.el9.aa

0.117-16.el9.aa

redhat/polkit-devel<0.117-16.el9.aa

0.117-16.el9.aa

redhat/polkit-libs<0.117-16.el9.aa

0.117-16.el9.aa

redhat/polkit-libs-debuginfo<0.117-16.el9.aa

0.117-16.el9.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/polkit to a version that resolves this vulnerability.
Fixed in 0.117-16.el9
Upgrade
Upgrade redhat/polkit-debuginfo to a version that resolves this vulnerability.
Fixed in 0.117-16.el9
Upgrade
Upgrade redhat/polkit-debugsource to a version that resolves this vulnerability.
Fixed in 0.117-16.el9
Upgrade
Upgrade redhat/polkit-devel to a version that resolves this vulnerability.
Fixed in 0.117-16.el9
Upgrade
Upgrade redhat/polkit-docs to a version that resolves this vulnerability.
Fixed in 0.117-16.el9
Upgrade
Upgrade redhat/polkit-libs to a version that resolves this vulnerability.
Fixed in 0.117-16.el9
Upgrade
Upgrade redhat/polkit-libs-debuginfo to a version that resolves this vulnerability.
Fixed in 0.117-16.el9
Upgrade
Upgrade redhat/polkit to a version that resolves this vulnerability.
Fixed in 0.117-16.el9.aa
Upgrade
Upgrade redhat/polkit-debuginfo to a version that resolves this vulnerability.
Fixed in 0.117-16.el9.aa
Upgrade
Upgrade redhat/polkit-debugsource to a version that resolves this vulnerability.
Fixed in 0.117-16.el9.aa
Upgrade
Upgrade redhat/polkit-devel to a version that resolves this vulnerability.
Fixed in 0.117-16.el9.aa
Upgrade
Upgrade redhat/polkit-libs to a version that resolves this vulnerability.
Fixed in 0.117-16.el9.aa
Upgrade
Upgrade redhat/polkit-libs-debuginfo to a version that resolves this vulnerability.
Fixed in 0.117-16.el9.aa

Event History

Nov 10, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What type of impact does this issue have?

The issue is a denial of service caused by unbounded processing of standard input. It affects polkit, which mediates communication between non-privileged and privileged processes.

Which packages are included in this update?

The update covers polkit and related packages: polkit-debuginfo, polkit-debugsource, polkit-devel, polkit-libs, polkit-libs-debuginfo, and polkit-docs.

RHSA-2026:97463: Moderate: polkit security update

Affected Software

Remediation

Event History

Frequently Asked Questions

What type of impact does this issue have?

Which packages are included in this update?

Company

Resources

Contact

Frequently Asked Questions

What type of impact does this issue have?

Which packages are included in this update?