Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestion detail

Untriaged
Permalink CVE-2026-4897
5.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): High (H)
created 5 months, 4 weeks ago Activity log
  • Created suggestion 5 months, 4 weeks ago
Polkit: polkit: denial of service via unbounded input processing through standard input

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.

References

Affected products

rhcos
polkit

Matching in nixpkgs

pkgs.polkit

Toolkit for defining and handling the policy that allows unprivileged processes to speak to privileged processes

  • nixos-unstable -
    • nixos-unstable-small 127
  • nixos-26.05 -
    • nixos-26.05-small 127

pkgs.cmd-polkit

Easily create polkit authentication agents by using commands

  • nixos-unstable -
    • nixos-unstable-small 0.3.0
  • nixos-26.05 -
    • nixos-26.05-small 0.3.0

pkgs.mate-polkit

Integrates polkit authentication for MATE desktop

  • nixos-unstable -
  • nixos-26.05 -

pkgs.polkit_gnome

Dbus session bus service that is used to bring up authentication dialogs

  • nixos-unstable -
    • nixos-unstable-small 0.105
  • nixos-26.05 -
    • nixos-26.05-small 0.105

pkgs.hyprpolkitagent

Polkit authentication agent written in QT/QML

  • nixos-unstable -
    • nixos-unstable-small 0.1.3
  • nixos-26.05 -
    • nixos-26.05-small 0.1.3

pkgs.mate.mate-polkit

Integrates polkit authentication for MATE desktop

  • nixos-unstable -
  • nixos-26.05 -

pkgs.pcscliteWithPolkit

Middleware to access a smart card using SCard API (PC/SC)

  • nixos-unstable -
    • nixos-unstable-small 2.4.1
  • nixos-26.05 -
    • nixos-26.05-small 2.4.1

pkgs.polkit-stdin-agent

Non-interactive polkit authentication agent that answers PAM prompts from a file descriptor

  • nixos-unstable -
    • nixos-unstable-small 0.3.3
  • nixos-26.05 -
    • nixos-26.05-small 0.3.1