CVE-2011-1485: Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users t...

Security readout for executives and security teams

CVE-2011-1485 is a local privilege escalation issue in PolicyKit/polkit. A local user could exploit a race condition involving pkexec and polkitd to gain higher privileges. It is not described as remotely exploitable in the supplied sources. Exposure is most likely on Linux systems with vulnerable PolicyKit/polkit packages and pkexec present, especially multi-user servers or desktops where untrusted users have local access. Treat as important for Linux estates with local users. It does not appear to be a remote-entry vulnerability, but successful exploitation could turn limited access into administrative control. Mitigation focus: Apply the relevant Linux distribution security update for PolicyKit/polkit.; Check Red Hat, Debian, Ubuntu, Fedora, Gentoo, and Mandriva guidance for affected packages.; Prioritize shared systems where local users have shell or desktop access..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.