Skip to main content

polkit CVE-2026-85498

MEDIUM
2026-09-07 vendor:ubuntu
Information Disclosure Red Hat Suse
Share

Severity by source

vuln.today AI
8.8 HIGH

Local D-Bus IPC requires basic local access (PR:L); polkit runs privileged so scope changes; full CIA impact plausible for stack corruption in root-level daemon.

3.1 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
SUSE
3.9 LOW
AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L
Red Hat
3.5 LOW
qualitative

Lifecycle Timeline

2
Analysis Generated
Sep 07, 2026 - 02:10 vuln.today
CVE Published
Sep 07, 2026 - 00:00 cve.org
MEDIUM

DescriptionCVE.org

[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]

AnalysisAI

Stack buffer underflow in polkit's read_cookie() function, introduced as a regression by the fix for CVE-2026-4897, exposes Linux systems to potential memory corruption and privilege escalation via polkit's D-Bus authentication path. Systems that applied the CVE-2026-4897 patch are specifically affected, meaning the remediation for a prior vulnerability created new exposure. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires local access to the target system - the attacker must be able to send D-Bus messages to the polkitd daemon, which is accessible to any local process on the system without elevated privileges. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment With no CVSS vector provided, risk must be assessed from the vulnerability class and target context. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Administrators should monitor the Ubuntu Security Notices (USN) portal for an updated polkit package that corrects this regression. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Low
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 12 Affected
SUSE Linux Enterprise Micro 5.3 Affected
SUSE Linux Enterprise Micro 5.4 Affected
SUSE Linux Enterprise Micro 5.5 Affected

Share

CVE-2026-85498 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy