CVE-2018-1116: Canonical Ubuntu Linux

Medium severity, CVSS 4.4. EPSS: 1.2% chance of exploitation in the next 30 days.

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.

Affected products

• Canonical Ubuntu Linux: version 12.04 only
• Debian Debian Linux: version 8.0 only
• Polkit Project Polkit: before 0.115 (fixed in 0.115)

Published 2018-07-10. Last modified 2026-06-17.