Amazon Linux 2023 : polkit, polkit-devel, polkit-libs (ALAS2023-2026-3379)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3379 advisory. A flaw was found in polkit. A regression in the fix for CVE-2026-4897 introduced a stack buffer underflow out-of-bounds read in the readcookie function of the polkit-agent-helper-1 setuid helper. When ...