4590 matches found
USN-8626-1 systemd vulnerabilities
It was discovered that systemd-homed did not properly verify the signature of home records. A local attacker could possibly use this issue to add arbitrary system groups to a logged-in user and gain elevated privileges. CVE-2026-16742 It was discovered that systemd-machined incorrectly handled...
CVE-2026-15060 systemd-machined: unprivileged users can terminate arbitrary processes
When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...
CVE-2026-15060
CVE-2026-15060 : The vulnerability affects systemd-machined on desktop systems running version ≥ v259 (or v258 with a local policy that permits the polkit action register-machine). An unprivileged user in a desktop graphical session can kill arbitrary processes, including privileged ones. Affecte...
CVE-2026-15060 systemd-machined: unprivileged users can terminate arbitrary processes
When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...
EUVD-2026-55627
When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...
CVE-2026-15060
When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...
CVE-2026-15060
When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...
CVE-2026-16742 systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
CVE-2026-16742 systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
CVE-2026-16742
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
CVE-2026-16742
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
EUVD-2026-55626
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
CVE-2026-16742
systemd-homed (CVE-2026-16742) contains a local privilege escalation flaw. The CVE entry describes an ability to add arbitrary system groups to a locally logged-in, homed-managed user, enabling elevation of privileges. The CVELIST record refines the root cause as missing home-record signature ver...
CVE-2026-15059
The CVE concerns systemd-oomd, where local unprivileged users can terminate arbitrary local processes via the systemd-oomd IPC API due to missing path traversal validation. Affected component: systemd-oomd IPC interface; root cause: lack of validation on paths in IPC calls. Impact: potential for ...
CVE-2026-15059 systemd-oomd: unprivileged users can terminate arbitrary processes
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...
CVE-2026-15059 systemd-oomd: unprivileged users can terminate arbitrary processes
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...
CVE-2026-15059
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...
CVE-2026-15059
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...