Polkit Authentication Bypass in LACT on Linux

Executive Summary

This vulnerability is an Authentication Bypass in LACT (Linux GPU Configuration And Monitoring Tool) versions up to 0.10.0. It occurs due to Polkit Authentication Based on UnixProcessSubject or Peer PID, allowing unauthorized access. The issue was fixed in commit d0478fe42c2219454e272f96b1cbd29ab37ee566.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check the version of LACT installed on your system. If you are running LACT version 0.10.0 or earlier, your system may be vulnerable. Run 'lact --version' or check your package manager for the installed version. Compare it against the fixed commit d0478fe42c2219454e272f96b1cbd29ab37ee566.

Useful 0 Not Useful 0

Impact Analysis

An attacker with local access could bypass authentication and gain elevated privileges on the system. This could allow unauthorized control over GPU settings, power management, or monitoring features, potentially leading to system instability or misuse of GPU resources.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows authentication bypass, which could lead to unauthorized access to sensitive system configurations and monitoring data. This may violate compliance requirements for data protection and access control in standards like GDPR and HIPAA, as unauthorized access could expose personal or health-related information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update LACT to a version that includes the fix from commit d0478fe42c2219454e272f96b1cbd29ab37ee566. If an update is not available, consider disabling the LACT service or restricting its use to trusted networks only. Avoid using remote TCP connections for LACT as they lack authentication.

Useful 0 Not Useful 0