Logo
›
›vulnerability›CVE-2021-4115
Name
CVE-2021-4115
Source
NVD ( link)Debian ( link)
Description
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned
CWEs
CWE-400
Published Date
Updated Date
Workaround
-
Advisories
https://access.redhat.com/security/cve/cve-2021-4115Third Party Advisory
https://gitlab.com/redhat/centos-stream/rpms/polkit/-/merge_requests/6/diffs?commit_id=bf900df04dc390d389e59aa10942b0f2b15c531ePatch
https://gitlab.freedesktop.org/polkit/polkit/-/issues/141Exploit
https://www.oracle.com/security-alerts/cpujul2022.htmlPatch
https://access.redhat.com/security/cve/cve-2021-4115Third Party Advisory
https://gitlab.com/redhat/centos-stream/rpms/polkit/-/merge_requests/6/diffs?commit_id=bf900df04dc390d389e59aa10942b0f2b15c531ePatch
https://gitlab.freedesktop.org/polkit/polkit/-/issues/141Exploit
https://www.oracle.com/security-alerts/cpujul2022.htmlPatch

Analysis#

Affected Component
Analysis
polkit
Patched

Vulnerability Ratings#

5.5
CVSSv31
2.1
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
polkit
buildroot
2025.02.x
125
Not Affected
polkit
buildroot
master
126
Not Affected
polkit
yocto
master
127
Not Affected
polkit
yocto
scarthgap
124
Not Affected

Resolved with patches#

polkit (yocto:kirkstone)

#
Title
Author
Resolve
1
CVE-2021-4115 (GHSL-2021-077) fix
Jan Rybar <jrybar@redhat.com>
CVE-2021-4115