CVE-2026-4897
A flaw was found in polkit.
Published Mar 26, 2026 · updated Sep 10, 2026 · freedesktop polkit
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 26, 2026 · NIST NVD
Detected
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.
Sep 10, 2026 · NIST NVD
Updated
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.
Affected
- cpe freedesktop/polkitversion unspecified
- cpe redhat/enterprise linux10.0
- cpe redhat/enterprise linux6.0
- cpe redhat/enterprise linux7.0
- cpe redhat/enterprise linux8.0
- cpe redhat/enterprise linux9.0
- cpe redhat/openshift container platform4.0
Sources
- CVE.orgVulnerability recordCVE-2026-4897
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-4897
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of
nvd.nist.gov