CVE-2016-2568

CVE-2016-2568 affects polkit (pkexec) and is triggered when pkexec is used with --user nonpriv, enabling a local attacker to escape to the parent session via a crafted TIOCSTI ioctl that pushes characters into the terminal input buffer. The vulnerability is tied to PolicyKit’s handling of unprivi...