This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-85498 →
Unrated
A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integ...
UBUNTU-CVE-2026-85498
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Ubuntu:Pro:14.04:LTSpolicykit-1 |
All versions→ Not listed |
Not listed |
| Ubuntu:Pro:16.04:LTSpolicykit-1 |
All versions→ Not listed |
Not listed |
| Ubuntu:18.04:LTSpolicykit-1 |
All versions→ Not listed |
Not listed |
| Ubuntu:20.04:LTSpolicykit-1 |
All versions→ Not listed |
Not listed |
| Ubuntu:22.04:LTSpolicykit-1 |
< 0.105-33ubuntu0.2→ 0.105-33ubuntu0.2 |
0.105-33ubuntu0.2 |
| Ubuntu:24.04:LTSpolicykit-1 |
< 124-2ubuntu1.24.04.4→ 124-2ubuntu1.24.04.4 |
124-2ubuntu1.24.04.4 |
| Ubuntu:26.04:LTSpolicykit-1 |
< 127-2ubuntu1.1→ 127-2ubuntu1.1 |
127-2ubuntu1.1 |
Original description The description as published by the source.
A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigger this flaw, potentially causing an application crash and resulting in a Denial of Service (DoS).
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- advisory ubuntu.com
- report ubuntu.com
- report cve.org