CVE-2026-85498
Publication date 7 September 2026
Last updated 4 November 2026
Ubuntu priority
Description
A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigger this flaw, potentially causing an application crash and resulting in a Denial of Service (DoS).
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| policykit-1 | 26.10 stonking |
Not affected
|
| 26.04 LTS resolute |
Fixed in 127-2ubuntu1.1
|
|
| 24.04 LTS noble |
Fixed in 124-2ubuntu1.24.04.4
|
|
| 22.04 LTS jammy |
Fixed in 0.105-33ubuntu0.2
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
|
| 14.04 LTS trusty |
Needs evaluation
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
3.5 · Low
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
References
Related Ubuntu Security Notices (USN)
- USN-8762-1
- polkit vulnerability
- 15 September 2026