12 Year Old Polkit Exploit, Still A Problem?

Channel:

Zaney

Subscribers:

7,660

Published on January 28, 2022 4:00:05 PM ● Video Link: https://www.youtube.com/watch?v=3tkP-LVTqCs

Duration: 4:29

139 views

8

There was an exploit discovered in Polkit's pkexec that dates all the way back to 2009. It allows regular users to gain root privileges on any non-patched distribution. Even with this being as bad of an exploit as it is and it being around for so long. It is incredible to see the speed at which distribution maintainers have leaped to action to get their users protected. At the time of posting this video most Linux distributions have already patched this so just ensure you have updated very recently. No reason to panic, just a reminder as to why it can be important to run updates once in a while!

What Is Polkit?
Polkit is the open source framework for allowing the interaction between privileged and non-privileged processes and pkexec doubles as an alternative to programs like sudo.

Reference: https://www.bleepingcomputer.com/news/security/linux-system-service-bug-gives-root-on-all-major-distros-exploit-released/

Patreon - https://www.patreon.com/akazaney
Dotfiles - https://www.gitlab.com/Zaney/dotfiles​​​
Discord - https://discord.gg/2cRdBs8
My Merch - https://zaney.creator-spring.com/
-------------------------------------------------------------------------------
Website - https://www.officialzaney.com
Gemini Capsule - gemini://zaney.org
Liberapay - https://liberapay.com/Zaney
Amazon Wishlist - https://www.amazon.com/hz/wishlist/ls/1KEY3CVUEPEV7?ref_=wl_share

#Linux #Polkit #exploit