CVE:CVE-2021-3560
CNNVD:CNNVD-202106-211
polkit是一个在类 Unix操作系统中控制系统范围权限的组件。通过定义和审核权限规则，实现不同优先级进程间的通讯。
polkit 存在代码问题漏洞，该漏洞源于当请求进程在调用polkit_system_bus_name_get_creds_sync之前断开与dbus-daemon的连接时，该进程无法获得进程的唯一uid和pid，也无法验证请求进程的特权。
solution:Upgrade polkit_project polkit to a higher version than 0.119,and avoid the version (,0.119); Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0; Upgrade canonical ubuntu_linux to a higher version than 20.04,and avoid the version 20.04; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat openshift_container_platform to a higher version than 4.7,and avoid the version 4.7