USN-8762-1: polkit vulnerability
Published Sep 15, 2026
·Updated
It was discovered that polkit incorrectly handled cookie input. A local attacker could possibly use this issue to cause polkit to crash, resulting in a denial of service, or execute arbitrary code.
Affected Software
10 affected componentsFixes available
polkit polkit
All of the following
ubuntu/polkitd<127-2ubuntu1.1
127-2ubuntu1.1
Ubuntu Ubuntu=26.04
All of the following
ubuntu/policykit-1<124-2ubuntu1.24.04.4
124-2ubuntu1.24.04.4
Ubuntu Ubuntu=24.04
All of the following
ubuntu/policykit-1<0.105-33ubuntu0.2
0.105-33ubuntu0.2
Ubuntu Ubuntu=22.04
ubuntu/policykit-1<0.105-33ubuntu0.2
0.105-33ubuntu0.2
ubuntu/policykit-1<124-2ubuntu1.24.04.4
124-2ubuntu1.24.04.4
ubuntu/policykit-1<127-2ubuntu1.1
127-2ubuntu1.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/polkitdto a version that resolves this vulnerability.Fixed in 127-2ubuntu1.1 - Upgrade
Upgrade
ubuntu/policykit-1to a version that resolves this vulnerability.Fixed in 124-2ubuntu1.24.04.4 - Upgrade
Upgrade
ubuntu/policykit-1to a version that resolves this vulnerability.Fixed in 0.105-33ubuntu0.2 - Upgrade
Upgrade
ubuntu/policykit-1to a version that resolves this vulnerability.Fixed in 127-2ubuntu1.1
Event History
Sep 15, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Advisory Published
via OSV·02:31 PM
Data Sourced
via OSV·02:31 PM
DescriptionAffected Software