PackageKit dnf5 backend: an unprivileged local user can uninstall packages under a simulate flag

Impact

PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. The dnf5 backend's RepoRemove handler guards with (role == REPO_REMOVE || !SIMULATE), which is always true for RepoRemove, so it executes the real transaction regardless. An unprivileged local user who can talk to the PackageKit D-Bus service can therefore perform a genuine removal while nominally simulating. On a GPU node that means someone with a shell can strip packages - a driver package, a runtime dependency - and take the node out of service or leave it in a state that needs rebuilding. Integrity and availability impact only, no disclosure. Affects only systems running PackageKit with the dnf5 backend.

Who can reach it

Any local unprivileged user with access to the PackageKit D-Bus interface on a host using the dnf5 backend. Authentication as a normal user is enough; no polkit prompt is reached.

What to do

Apply your distribution's PackageKit update carrying commit 33be77b (Fedora and RHEL trackers are linked); restarting the packagekitd service picks up the fix, no reboot needed. If a patch is not yet available for your release, the direct mitigation is to remove or disable PackageKit on fleet nodes - unattended GPU hosts rarely need it, since package management runs through configuration management instead.

References

Related entries

• Linux kernel (drivers/pci/controller/dwc): Raising an MSI-X interrupt is a posted PCI write, and the endpoint driverCVE-2026-23361 · Linux kernel (drivers/pci/controller/dwc)High
• Linux kernel crypto authencesn: out-of-bounds access with a 1-3 byte ahash digest via AF_ALGCVE-2026-46033 · Linux kernel crypto authencesn (ahash digest size validation)High
• Linux kernel (drivers/iommu/intel): Killing a VM that has a device attached through the VT-d nested/PASID path makesCVE-2026-52953 · Linux kernel (drivers/iommu/intel)High
• Linux kernel (virt/kvm): A guest store that splits a page and lands on a datamatch-enabled ioeventfd reaches a BUG_ONCVE-2026-63806 · Linux kernel (virt/kvm)High
• Linux KVM/SVM - AVIC IPI virtualization on Hygon Family 18h: AVIC inter-processor-interrupt virtualization is unsafe onCVE-2026-64172 · Linux KVM/SVM - AVIC IPI virtualization on Hygon Family 18hHigh
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A correctness defect in the amdkfd (KFD computeCVE-2026-68258 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)High