CVE-2011-1485: Red Hat Policykit

Medium severity, CVSS 6.9. EPSS: 5.2% chance of exploitation in the next 30 days.

Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.

Affected products

• Red Hat Policykit: version 0.96 only

Published 2011-05-31. Last modified 2026-06-16.