udisks2 security update

2.10.90-6.0.1.el101.1 - Enable btrfs support for OL supported arches Orabug: 37464632 2.10.90-6.1 - Add missing polkit check for RestoreEncryptedHeader CVE-2026-26103 RHEL-148565 - Add missing polkit check for HeaderBackup CVE-2026-26104 RHEL-148588...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Loca...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018 & CVE-2025-6019 PoC A Proof of Concept for chai...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018 + CVE-2025-6019 Exploit Linux Local Privilege...

Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2026-1190)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2026-1139)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.10.0 : polkit (EulerOS-SA-2026-1190)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...

EulerOS Virtualization 2.10.1 : polkit (EulerOS-SA-2026-1139)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...

MiracleLinux 7 : libblockdev-2.18-5.0.1.el7.AXS7 (AXSA:2025-10699:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10699:04 advisory. CVE-2025-6019: don't allow suid and dev set on fs resize CVEs: CVE-2025-6019 A Local Privilege Escalation LPE vulnerability was found in libblockdev...

MiracleLinux 7 : polkit-0.112-26.el7 (AXSA:2020-4540:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4540:01 advisory. polkit: Improper authorization in polkitbackendinteractiveauthoritycheckauthorization function in polkitd CVE-2018-1116 Tenable has extracted the preceding...

MiracleLinux 8 : polkit-0.115-13.el8.2 (AXSA:2022-3159:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3159:03 advisory. polkit: file descriptor leak allows an unprivileged user to cause a crash CVE-2021-4115 Tenable has extracted the preceding description block directly from t...

MiracleLinux 8 : polkit-0.115-13.el8.1 (AXSA:2022-3018:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3018:02 advisory. polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector CVE-2021-4034 Tenable has extracted the preceding description block...

MiracleLinux 7 : polkit-0.112-26.el7.1 (AXSA:2022-3017:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3017:01 advisory. polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector CVE-2021-4034 Tenable has extracted the preceding description block...

MiracleLinux 8 : polkit-0.115-11.el8.1 (AXSA:2021-2198:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2198:01 advisory. polkit: local privilege escalation using polkitsystembusnamegetcredssync CVE-2021-3560 Tenable has extracted the preceding description block directly from th...

MiracleLinux 4 : polkit-0.96-2.AXS4.1 (AXSA:2011-166:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-166:01 advisory. PolicyKit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security...

MiracleLinux 4 : spice-gtk-0.20-11.AXS4 (AXSA:2014-014:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-014:01 advisory. Client libraries for SPICE desktop servers. Security issues fixed with this release: CVE-2013-4324 spice-gtk 0.14, and possibly other versions, invokes the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003871 advisory. In PolicyKit aka polkit 0.115, the start time protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly...

MiracleLinux 7 : polkit-0.112-6.el7 (AXSA:2016-089:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-089:01 advisory. polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security issues...

MiracleLinux 7 : polkit-0.112-18.el7.1 (AXSA:2019-3762:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3762:02 advisory. Security Fix - PolicyKitfork CVE-2019-6133 CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 7 : polkit-0.112-22.el7 (AXSA:2019-4123:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4123:04 advisory. polkit: Improper handling of user with uid INTMAX leading to authentication bypass CVE-2018-19788 Tenable has extracted the preceding description block...