The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Polkit | Polkit_project | * | 0.112 (including) |