VYPR

Zbus Polkit

by Z Galaxy

CVEs (1)

  • CVE-2026-78422HigAug 31, 2026
    risk 0.40cvss epss

    Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer (D-Bus type i). Because of this…