QSN-8762-1: polkit vulnerability
2026-09-15

Summary:
polkit could be made to crash or run programs as an administrator.

Details:
It was discovered that polkit incorrectly handled cookie input.
A local
attacker could possibly use this issue to cause polkit
to crash, resulting
in a denial of service, or execute arbitrary code.

Affected QuantaStor releases:
  6.9.1.001 jammy: libpolkit-agent-1-0 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.9.1.001 jammy: libpolkit-gobject-1-0 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.9.1.001 jammy: pkexec 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.9.1.001 jammy: policykit-1 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.9.1.001 jammy: polkitd 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.9.0.464 jammy: libpolkit-agent-1-0 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.9.0.464 jammy: libpolkit-gobject-1-0 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.9.0.464 jammy: pkexec 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.9.0.464 jammy: policykit-1 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.9.0.464 jammy: polkitd 0.105-33ubuntu0.2 (fixed in 0.105-33ubuntu0.2)
  6.8.6.015 jammy: libpolkit-agent-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.6.015 jammy: libpolkit-gobject-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.6.015 jammy: pkexec 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.6.015 jammy: policykit-1 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.6.015 jammy: polkitd 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.5.018 jammy: libpolkit-agent-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.5.018 jammy: libpolkit-gobject-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.5.018 jammy: pkexec 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.5.018 jammy: policykit-1 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.5.018 jammy: polkitd 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.4.038 jammy: libpolkit-agent-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.4.038 jammy: libpolkit-gobject-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.4.038 jammy: pkexec 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.4.038 jammy: policykit-1 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.4.038 jammy: polkitd 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.3.018 jammy: libpolkit-agent-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.3.018 jammy: libpolkit-gobject-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.3.018 jammy: pkexec 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.3.018 jammy: policykit-1 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.3.018 jammy: polkitd 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.2.002 jammy: libpolkit-agent-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.2.002 jammy: libpolkit-gobject-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.2.002 jammy: pkexec 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.2.002 jammy: policykit-1 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.2.002 jammy: polkitd 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.1.007 jammy: libpolkit-agent-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.1.007 jammy: libpolkit-gobject-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.1.007 jammy: pkexec 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.1.007 jammy: policykit-1 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.1.007 jammy: polkitd 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.0.205 jammy: libpolkit-agent-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.0.205 jammy: libpolkit-gobject-1-0 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.0.205 jammy: pkexec 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.0.205 jammy: policykit-1 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)
  6.8.0.205 jammy: polkitd 0.105-33ubuntu0.1 (fixed in 0.105-33ubuntu0.2)

CVEs: CVE-2026-85498

References:
  https://ubuntu.com/security/notices/USN-8762-1