CVE-2026-85498

Name of the Vulnerable Software and Affected Versions polkit (affected versions not specified)

Description An issue exists where cookie input is handled incorrectly, specifically involving a stack buffer underflow in the read cookie() function. This was introduced as a regression in a previous fix. A local attacker could exploit this to cause the system to crash, leading to a denial of service, or to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.