Published on: 16 June 2021
A vulnerability was found in a Linux system service called polkit which is installed by default in several Linux distributions. The proof-of-concept against the vulnerability has been publicly available on the Internet. A local authenticated attacker may leverage this vulnerability to gain root privilege on a vulnerable system.
It is strongly recommended to consult the product vendors if the used Linux systems are affected.
Successful exploitation could lead to escalation of privilege on a vulnerable system.
The vulnerability is fixed in some of the Linux distributions such as RedHat and Ubuntu. The following is only a sample list of Linux distributions that are affected. The list is not exhaustive and it is strongly recommended to consult the product vendors if the used Linux systems are affected. System administrators should check with their product vendors to confirm if their Linux systems are affected and the availability of patches, and if so, apply the patches or follow the recommendations provided by the product vendors to mitigate the risk.