CVE-2015-3255: Polkit Project Polkit

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions.

Affected products

• Polkit Project Polkit: up to and including 0.112

Published 2015-10-26. Last modified 2026-06-17.