USN-8762-1: polkit vulnerability

Ubuntu warns polkit mishandles cookie input, letting a local attacker crash the daemon or possibly execute arbitrary code.

Ubuntu Security Notice USN-8762-1 addresses a vulnerability in polkit stemming from incorrect handling of cookie input. A local attacker could exploit the flaw to cause polkit to crash, producing a denial of service, or potentially execute arbitrary code. The notice indicates exploitation requires local access to the affected system.

• Polkit incorrectly handles cookie input
• Local attacker can cause a denial of service via crash
• Arbitrary code execution is also possible
• Requires local access; patch via Ubuntu package updates