polkit: Local privilege escalation via polkit_system_bus_name_get_creds_sync() race

Impact

Local privilege escalation via polkit_system_bus_name_get_creds_sync() race [KEV]

Who can reach it

Local user

What to do

Package update + restart polkitd; no reboot

References

Related entries

• polkit (pkexec): PwnKit: local privilege escalation to root via argv handlingCVE-2021-4034 · polkit (pkexec)High
• Linux kernel (net/smc): The CDC send-completion handler takes a lock inside an smc_sock that close() has already freedCVE-2021-46925 · Linux kernel (net/smc)High
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amd/amdkfd): A correctness defect in the amdkfd (KFD computeCVE-2021-47551 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amd/amdkfd)High
• Linux kernel (arch/x86/kvm/mmu): The TDP MMU skipped invalid roots when unmapping a GFN range, so KVM could still holdCVE-2021-47639 · Linux kernel (arch/x86/kvm/mmu)High
• Linux kernel (fs_context): Heap overflow in legacy filesystem parameter handlingCVE-2022-0185 · Linux kernel (fs_context)High
• Linux i915 GPU kernel driver (GTT TLB handling): Stale GPU TLB entries let the GPU keep reading physical pages afterCVE-2022-0330 · Linux i915 GPU kernel driver (GTT TLB handling)High