CVE-2026-85498
Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow
CVSS 3.1 3.5 LOWCheck source for fixed versionsKEV status unknown
cve-program · CVE-2026-85498
PublishedA flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigger this flaw, potentially causing an application crash and resulting in a Denial of Service (DoS).
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-85498 · CVE overview and exploitation status
cve-program · CVE-2026-85498
Related changes
Linked by CVE identifier- Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow · Affected-version evidence changed · 6 Nov 2026
- Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow · Affected-version evidence changed · 30 Oct 2026