CISA Warns of Active Exploitation of 'PwnKit' Linux Vulnerability in the Wild

[Jan Rybar]

Hi,

Thanks for the heads-up.

I'm not quite sure what to take from the article. The CVE is already aging
and after all the fame it got in the media, I see it unlikely it's not
patched among linux distros.
The article says it itself:
*"It's not immediately clear how the vulnerability is being weaponized in
the wild, nor is there any information on the identity of the threat actor
that may be exploiting it."*

There's not much else the upstream project can do.
Or any other idea?

Thanks and have a nice day.
Jan Rybar

On Thu, Jun 30, 2022 at 5:59 AM Turritopsis Dohrnii Teo En Ming <
tdtemccna at gmail.com> wrote:

> Subject: CISA Warns of Active Exploitation of 'PwnKit' Linux
> Vulnerability in the Wild
>
> Good day from Singapore,
>
> Just sharing this article for more awareness.
>
> Article: CISA Warns of Active Exploitation of 'PwnKit' Linux
> Vulnerability in the Wild
> Link:
> https://thehackernews.com/2022/06/cisa-warns-of-active-exploitation-of.html
>
> Regards,
>
> Mr. Turritopsis Dohrnii Teo En Ming
> Targeted Individual in Singapore
> 30 Jun 2022 Thu
> Blogs:
> https://tdtemcerts.blogspot.com
> https://tdtemcerts.wordpress.com
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/polkit-devel/attachments/20220630/ab8ea4a2/attachment.htm>