Home / mailings

PDF

[USN-8762-1] polkit vulnerability

Posted on 15 September 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8762-1
September 15, 2026

policykit-1 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

polkit could be made to crash or run programs as an administrator.

Software Description:
- policykit-1: framework for managing administrative policies and privileges

Details:

It was discovered that polkit incorrectly handled cookie input.
A local
attacker could possibly use this issue to cause polkit
to crash, resulting
in a denial of service, or execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
polkitd 127-2ubuntu1.1

Ubuntu 24.04 LTS
policykit-1 124-2ubuntu1.24.04.4

Ubuntu 22.04 LTS
policykit-1 0.105-33ubuntu0.2

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8762-1
CVE-2026-85498

Package Information:
https://launchpad.net/ubuntu/+source/policykit-1/127-2ubuntu1.1
https://launchpad.net/ubuntu/+source/policykit-1/124-2ubuntu1.24.04.4
https://launchpad.net/ubuntu/+source/policykit-1/0.105-33ubuntu0.2

--===============6922925494410381102==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP