CVE-2026-85498
CVE-2026-85498 · UBUNTU-CVE-2026-85498
This page contains facts from public vulnerability sources. Check the original advisory before updating.
[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]
Fix available
- Published
- Updated
Stack: system
Affected products and versions
policykit-1 Debian:14
- Versions
- 126-2
- 127-1
- 127-2
- 127-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
policykit-1 Ubuntu:Pro:14.04:LTS
- Versions
- 0.105-3ubuntu3
- 0.105-4ubuntu1
- 0.105-4ubuntu2
- 0.105-4ubuntu2.14.04.1
- 0.105-4ubuntu3.14.04.1
- 0.105-4ubuntu3.14.04.2
- 0.105-4ubuntu3.14.04.5
- 0.105-4ubuntu3.14.04.6
- 0.105-4ubuntu3.14.04.6+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
policykit-1 Ubuntu:Pro:16.04:LTS
- Versions
- 0.105-11ubuntu2
- 0.105-13
- 0.105-13ubuntu1
- 0.105-14
- 0.105-14.1
- 0.105-14.1ubuntu0.1
- 0.105-14.1ubuntu0.4
- 0.105-14.1ubuntu0.5
- 0.105-14.1ubuntu0.5+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
policykit-1 Ubuntu:18.04:LTS
- Versions
- 0.105-18
- 0.105-20
- 0.105-20ubuntu0.18.04.1
- 0.105-20ubuntu0.18.04.4
- 0.105-20ubuntu0.18.04.5
- 0.105-20ubuntu0.18.04.6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
policykit-1 Ubuntu:20.04:LTS
- Versions
- 0.105-26ubuntu1
- 0.105-26ubuntu1.1
- 0.105-26ubuntu1.2
- 0.105-26ubuntu1.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
policykit-1 Ubuntu:22.04:LTS
- Versions
- 0.105-31
- 0.105-31ubuntu1
- 0.105-31.1
- 0.105-32
- 0.105-33
- 0.105-33ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 0.105-33ubuntu0.2
Update to 0.105-33ubuntu0.2
policykit-1 Ubuntu:24.04:LTS
- Versions
- 123-1
- 123-3
- 124-1
- 124-1ubuntu1
- 124-2ubuntu1
- 124-2ubuntu1.24.04.2
- 124-2ubuntu1.24.04.3
- Affected ranges
- ECOSYSTEM: < 124-2ubuntu1.24.04.4
Update to 124-2ubuntu1.24.04.4
policykit-1 Ubuntu:26.04:LTS
- Versions
- 126-2
- 127-1
- 127-2
- 127-2ubuntu1
- Affected ranges
- ECOSYSTEM: < 127-2ubuntu1.1
Update to 127-2ubuntu1.1