Polkit CVE-2021-3560 Research
Posted by deepcore on December 11, 2021 – 4:27 am
This document covers a vulnerability in policy kit (polkit) used on many Linux distributions, which enables an unprivileged local user to get a privileged shell (root) on the system by manually sending dbus messages to the dbus-daemon, then killing the request before it has been fully processed.
Post a reply
You must be logged in to post a comment.