PT-2025-29465 · Polkit+5 · Polkit+5

Mohamed Maatallah · Published 2025-07-14 · Updated 2026-04-14 · CVE-2025-7519

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: polkit (affected versions not specified)

Description: A flaw exists in polkit where processing an XML policy with 32 or more nested elements in depth can trigger an out-of-bounds write. This can lead to a crash or unexpected behavior, with the possibility of arbitrary code execution. Exploitation requires a high-privilege account to place a malicious policy file.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

AZL-65379

AZL-65415

BDU:2025-12602

CVE-2025-7519

OESA-2025-1914

OESA-2025-1915

OESA-2025-1916

OESA-2025-1917

OESA-2025-1918

OESA-2025-1919

OPENSUSE-SU-2026:10453-1

SUSE-SU-2025:02525-1

SUSE-SU-2025:02527-1

SUSE-SU-2025:02528-1

SUSE-SU-2025:20559-1

SUSE-SU-2025:20662-1

SUSE-SU-2025_02525-1

SUSE-SU-2025_02527-1

SUSE-SU-2025_02528-1

USN-8173-1

Affected Products

Debian

Linuxmint

Red Os

Suse

Ubuntu

Polkit

References · 52

• https://github.com/polkit-org/polkit/pull/570 · Patch
• https://github.com/polkit-org/polkit/commit/107d3801361b9f9084f78710178e683391f1d245 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:20662-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-65379 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-65415 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20559-1 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2025-7519 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02528-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1915 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1918 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1919 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-4897 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory