CVE-2015-3218: Polkit Project Polkit

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.

Affected products

• Polkit Project Polkit: up to and including 0.112

Published 2015-10-26. Last modified 2026-06-17.