Описание
No description is available for this CVE.
Отчет
This issue is classified as Low severity because there is no observable effect of the one byte out-of-bounds read. No information disclosure or affect to integrity has been demonstrated.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the criteria for a mitigation as defined by the Red Hat Product Security team. This flaw remains subject to future review as new information becomes available. Exposure is limited: the defect is reachable only by a local/adjacent low-privileged user interacting with the polkit authentication agent and results at most in a crash (availability) of the affected process.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | polkit | Fix deferred | ||
| Red Hat Enterprise Linux 10 | polkit-pkla-compat | Fix deferred | ||
| Red Hat Enterprise Linux 6 | polkit | Fix deferred | ||
| Red Hat Enterprise Linux 6 | polkit-gnome | Fix deferred | ||
| Red Hat Enterprise Linux 7 | polkit | Fix deferred | ||
| Red Hat Enterprise Linux 7 | polkit-kde | Fix deferred | ||
| Red Hat Enterprise Linux 7 | polkit-pkla-compat | Fix deferred | ||
| Red Hat Enterprise Linux 7 | polkit-qt | Fix deferred | ||
| Red Hat Enterprise Linux 8 | polkit | Fix deferred | ||
| Red Hat Enterprise Linux 8 | polkit-pkla-compat | Fix deferred |
Показывать по
Дополнительная информация
Статус:
3.5 Low
CVSS3
Связанные уязвимости
[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]
[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]
3.5 Low
CVSS3