← Database

CVE-2021-4115

MEDIUM CVSS: 5.5 Published: 2022-02-21 Modified: 2026-06-17

Description

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned

Affected Platforms

Canonical Ubuntu LinuxRedhat Enterprise LinuxFedoraproject FedoraPolkit Project PolkitDebian Debian LinuxOracle Zfs Storage Appliance Kit

Weakness Type

CWE-400, NVD-CWE-Other

References