polkit: Local privilege escalation via polkit_system_bus_name_get_creds_sync() race

CVE-2021-3560Kernel, userspace & hypervisorKnown exploitedcurated

Impact

Local privilege escalation via polkit_system_bus_name_get_creds_sync() race [KEV]

Who can reach it

Local user

What to do

Package update + restart polkitd; no reboot

References

https://access.redhat.com/security/cve/CVE-2021-3560

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.