Canadian Cybersecurity Community

The issue, tracked as CVE-2021-4034 (CVSS score: 7.8), came to light in January 2022 and concerns a case of local privilege escalation in polkit's pkexec utility, which allows an authorized user to execute commands as another user.

Polkit (formerly called PolicyKit) is a toolkit for controlling system-wide privileges in Unix-like operating systems, and provides a mechanism for non-privileged processes to communicate with privileged processes.

See CISA's Known Exploited Vulnerabilities Catalog - Known Exploited Vulnerabilities Catalog

Also note that you can subscribe to receive Bulletins as they're published from CISA --> Cybersecurity and Infrastructure Security Agency 

https://thehackernews.com/2022/06/cisa-warns-of-active-exploitation-of.html

------------------------------
Dylan D'Silva
Security Researcher
Tripwire
------------------------------