CVE-2026-29111mediumCWE-269

CVE-2026-29111: fallo de gravedad media en systemd

systemd: Local unprivileged user can trigger an assert

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear systemd+ Monitorear systemd

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.5epss 0.1%
systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Productos afectados
systemd · systemd
CVEs relacionadas — systemd

En el mismo producto, de las más peligrosas a las menos.

CVE-2018-15686HIGHsystemd: reexec state injection: fgets() on overlong lines leads to line splittingEPSS 2.3%CVE-2018-15688HIGHOut-of-Bounds write in systemd-networkd dhcpv6 option handlingEPSS 1.8%CVE-2018-15687HIGHsystemd: chown_one() can dereference symlinksEPSS 1.1%CVE-2012-1101—CVE-2012-1101EPSS 0.4%CVE-2026-40227MEDIUMCVE-2026-40227EPSS 0.2%CVE-2026-40228LOWCVE-2026-40228EPSS 0.2%