{"id":"CVE-2025-4598","aliases":["ALSA-2025:22660","AZL-64289","AZL-64292","AZL-66702","AZL-66704","CLSA-2025-1766079368","DEBIAN-CVE-2025-4598","DLA-4259-1","DSA-5931-1","EUVD-2025-16486","GHSA-jx2m-wgq5-5qcj","MGASA-2025-0178","OESA-2025-1738","OESA-2025-1739","OESA-2025-1740","OESA-2025-1741","OESA-2025-1764","OESA-2025-1946","RHSA-2025:22660","RHSA-2026:18153","RLSA-2025:22660","RLSA-2026:18153","SUSE-SU-2025:02019-1","SUSE-SU-2025:02243-1","SUSE-SU-2025:02244-1","SUSE-SU-2025:02675-1","SUSE-SU-2025:20405-1","SUSE-SU-2025:20416-1","SUSE-SU-2025:20554-1","SUSE-SU-2025:20597-1","UBUNTU-CVE-2025-4598","USN-7559-1","openSUSE-SU-2025:15299-1"],"status":"published","title":"Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01277,"percentile":0.70163,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-364"],"published":"2025-05-29T00:00:00Z","modified":"2026-11-05T21:15:39Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"rhel-net-naming-sysattrs","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-boot-unsigned","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-container","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-devel","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-journal-remote","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-libs","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-oomd","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-pam","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-resolved","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-rpm-macros","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-udev","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"systemd-ukify","fixed_in":["252-55.el9_7.7.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"systemd","fixed_in":["255-24"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"systemd","fixed_in":["250.3-23"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"kernel","fixed_in":["6.6.96.2-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"kernel","fixed_in":["5.15.186.1-1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-boot-unsigned","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-container","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-devel","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-journal-remote","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-libs","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-oomd","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-pam","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-resolved","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-rpm-macros","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-sysusers","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-tmpfiles","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-udev","fixed_in":["252-14.el9_2.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"systemd","fixed_in":["252.38-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"systemd","fixed_in":["257.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["257.6-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"systemd","fixed_in":["247.3-7+deb11u7"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"systemd","fixed_in":["253.33-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"systemd","fixed_in":["249-103.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"systemd","fixed_in":["249-103.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"systemd","fixed_in":["255-44.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"systemd","fixed_in":["255-44.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"systemd","fixed_in":["255-44.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"systemd","fixed_in":["243-85.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-boot-unsigned","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-boot-unsigned-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-container-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-debugsource","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-devel","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-journal-remote","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-journal-remote-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-libs-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-oomd-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-pam-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-resolved-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-standalone-sysusers-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-standalone-tmpfiles-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-udev-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-ukify","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rhel-net-naming-sysattrs","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-boot-unsigned-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-container","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-container-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-debugsource","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-journal-remote-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-libs","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-libs-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-oomd","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-oomd-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-pam","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-pam-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-resolved","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-resolved-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-rpm-macros","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-standalone-sysusers-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-standalone-tmpfiles-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-udev","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-udev-debuginfo","fixed_in":["0:252-55.el9_7.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-boot-unsigned","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-container-debuginfo","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-debuginfo","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-debugsource","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-devel","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-journal-remote","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-journal-remote-debuginfo","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-libs-debuginfo","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-oomd-debuginfo","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-pam-debuginfo","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-resolved-debuginfo","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-tests-debuginfo","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-udev-debuginfo","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-ukify","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-container","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-libs","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-oomd","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-pam","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-resolved","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-rpm-macros","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-udev","fixed_in":["0:257-23.el10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"systemd","fixed_in":["0:252-55.el9_7.7.rocky.0.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"systemd","fixed_in":["0:257-23.el10_2.1.rocky.0.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"systemd","fixed_in":["228-157.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"systemd","fixed_in":["254.25-150600.4.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"systemd","fixed_in":["254.25-150600.4.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"systemd","fixed_in":["254.25-150600.4.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"systemd","fixed_in":["254.25-150600.4.40.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"systemd","fixed_in":["254.25-150600.4.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"systemd","fixed_in":["249.17-150400.8.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"systemd","fixed_in":["254.25-1.1","254.27-1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"systemd","fixed_in":["254.25-slfo.1.1_1.1","254.27-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"systemd","fixed_in":["245.4-4ubuntu3.24+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"systemd","fixed_in":["249.11-0ubuntu3.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"systemd","fixed_in":["255.4-1ubuntu8.8"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"systemd","fixed_in":["257.7-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"rhel-net-naming-sysattrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-oomd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"systemd-ukify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-55.el9_7.7.alma.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-24"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"250.3-23"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.96.2-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.186.1-1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-oomd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-sysusers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-tmpfiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252.38-1~deb12u1"}]}],"versions":["252.11-1","252.11-1~deb12u1","252.12-1~deb12u1","252.14-1~deb12u1","252.16-1~deb12u1","252.17-1~deb12u1","252.18-1~deb12u1","252.19-1~deb12u1","252.20-1~deb12u1","252.21-1~deb12u1","252.22-1~deb12u1","252.23-1~deb12u1","252.24-1~deb12u1","252.25-1~deb12u1","252.26-1~deb12u1","252.26-1~deb12u2","252.26-1~deb12u2~bpo11+1","252.27-1~deb12u1","252.28-1~deb12u1","252.29-1~deb12u1","252.29-1~deb12u1~bpo11+1","252.30-1~deb12u1","252.30-1~deb12u2","252.31-1~deb12u1","252.32-1~deb12u1","252.33-1~deb12u1","252.36-1~deb12u1","252.6-1","252.6-1+loong64"]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.6-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"247.3-7+deb11u7"}]}],"versions":["247.3-6","247.3-7","247.3-7+deb11u1","247.3-7+deb11u2","247.3-7+deb11u3","247.3-7+deb11u4","247.3-7+deb11u5","247.3-7+deb11u6"]},{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252.38-1~deb12u1"}]}],"versions":["252.11-1","252.11-1~deb12u1","252.12-1~deb12u1","252.14-1~deb12u1","252.16-1~deb12u1","252.17-1~deb12u1","252.18-1~deb12u1","252.19-1~deb12u1","252.20-1~deb12u1","252.21-1~deb12u1","252.22-1~deb12u1","252.23-1~deb12u1","252.24-1~deb12u1","252.25-1~deb12u1","252.26-1~deb12u1","252.26-1~deb12u2","252.26-1~deb12u2~bpo11+1","252.27-1~deb12u1","252.28-1~deb12u1","252.29-1~deb12u1","252.29-1~deb12u1~bpo11+1","252.30-1~deb12u1","252.30-1~deb12u2","252.31-1~deb12u1","252.32-1~deb12u1","252.33-1~deb12u1","252.36-1~deb12u1","252.6-1","252.6-1+loong64"]},{"source":"osv","ecosystem":"Mageia:9","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"253.33-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249-103.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249-103.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-44.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-44.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-44.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-85.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-boot-unsigned-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-oomd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-resolved-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-standalone-sysusers-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-standalone-tmpfiles-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"systemd-ukify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rhel-net-naming-sysattrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-boot-unsigned-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-oomd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-oomd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-resolved-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-standalone-sysusers-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-standalone-tmpfiles-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-oomd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-resolved-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-ukify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-oomd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:252-55.el9_7.7.rocky.0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:257-23.el10_2.1.rocky.0.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.25-150600.4.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.25-150600.4.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.25-150600.4.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.25-150600.4.40.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.25-150600.4.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.25-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.25-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.27-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.27-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+esm1"}]}],"versions":["242-7ubuntu3","243-2ubuntu1","243-3ubuntu1","244-3ubuntu1","244.1-0ubuntu2","244.1-0ubuntu3","244.2-1ubuntu1","244.3-1ubuntu1","245.2-1ubuntu1","245.2-1ubuntu2","245.4-2ubuntu1","245.4-4ubuntu1","245.4-4ubuntu3","245.4-4ubuntu3.1","245.4-4ubuntu3.2","245.4-4ubuntu3.3","245.4-4ubuntu3.4","245.4-4ubuntu3.5","245.4-4ubuntu3.6","245.4-4ubuntu3.7","245.4-4ubuntu3.10","245.4-4ubuntu3.11","245.4-4ubuntu3.13","245.4-4ubuntu3.14","245.4-4ubuntu3.15","245.4-4ubuntu3.16","245.4-4ubuntu3.17","245.4-4ubuntu3.18","245.4-4ubuntu3.19","245.4-4ubuntu3.20","245.4-4ubuntu3.21","245.4-4ubuntu3.22","245.4-4ubuntu3.23","245.4-4ubuntu3.24"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.11-0ubuntu3.16"}]}],"versions":["248.3-1ubuntu8","249.5-2ubuntu1","249.5-2ubuntu2","249.5-2ubuntu3","249.5-2ubuntu4","249.9-0ubuntu2","249.10-0ubuntu1","249.10-0ubuntu2","249.11-0ubuntu1","249.11-0ubuntu2","249.11-0ubuntu3","249.11-0ubuntu3.1","249.11-0ubuntu3.3","249.11-0ubuntu3.4","249.11-0ubuntu3.6","249.11-0ubuntu3.7","249.11-0ubuntu3.9","249.11-0ubuntu3.10","249.11-0ubuntu3.11","249.11-0ubuntu3.12","249.11-0ubuntu3.15"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255.4-1ubuntu8.8"}]}],"versions":["253.5-1ubuntu6","253.5-1ubuntu7","255.2-3ubuntu2","255.4-1ubuntu5","255.4-1ubuntu6","255.4-1ubuntu7","255.4-1ubuntu8","255.4-1ubuntu8.1","255.4-1ubuntu8.2","255.4-1ubuntu8.4","255.4-1ubuntu8.5","255.4-1ubuntu8.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+esm1"}]}],"versions":["242-7ubuntu3","243-2ubuntu1","243-3ubuntu1","244-3ubuntu1","244.1-0ubuntu2","244.1-0ubuntu3","244.2-1ubuntu1","244.3-1ubuntu1","245.2-1ubuntu1","245.2-1ubuntu2","245.4-2ubuntu1","245.4-4ubuntu1","245.4-4ubuntu3","245.4-4ubuntu3.1","245.4-4ubuntu3.2","245.4-4ubuntu3.3","245.4-4ubuntu3.4","245.4-4ubuntu3.5","245.4-4ubuntu3.6","245.4-4ubuntu3.7","245.4-4ubuntu3.10","245.4-4ubuntu3.11","245.4-4ubuntu3.13","245.4-4ubuntu3.14","245.4-4ubuntu3.15","245.4-4ubuntu3.16","245.4-4ubuntu3.17","245.4-4ubuntu3.18","245.4-4ubuntu3.19","245.4-4ubuntu3.20","245.4-4ubuntu3.21","245.4-4ubuntu3.22","245.4-4ubuntu3.23","245.4-4ubuntu3.24"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.11-0ubuntu3.16"}]}],"versions":["248.3-1ubuntu8","249.5-2ubuntu1","249.5-2ubuntu2","249.5-2ubuntu3","249.5-2ubuntu4","249.9-0ubuntu2","249.10-0ubuntu1","249.10-0ubuntu2","249.11-0ubuntu1","249.11-0ubuntu2","249.11-0ubuntu3","249.11-0ubuntu3.1","249.11-0ubuntu3.3","249.11-0ubuntu3.4","249.11-0ubuntu3.6","249.11-0ubuntu3.7","249.11-0ubuntu3.9","249.11-0ubuntu3.10","249.11-0ubuntu3.11","249.11-0ubuntu3.12","249.11-0ubuntu3.15"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255.4-1ubuntu8.8"}]}],"versions":["253.5-1ubuntu6","253.5-1ubuntu7","255.2-3ubuntu2","255.4-1ubuntu5","255.4-1ubuntu6","255.4-1ubuntu7","255.4-1ubuntu8","255.4-1ubuntu8.1","255.4-1ubuntu8.2","255.4-1ubuntu8.4","255.4-1ubuntu8.5","255.4-1ubuntu8.6"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.7-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"oracle","product":"linux"},{"vendor":"red hat","product":"red hat ceph storage 7"},{"vendor":"red hat","product":"red hat ceph storage 8"},{"vendor":"red hat","product":"red hat discovery 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat insights proxy 1.5"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"systemd_project","product":"systemd"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:22660","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22868","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23227","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23234","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0414","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1652","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:18153","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-4598","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369242","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/05/29/3","tags":["Mailing List","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2025/06/05/1","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/06/05/3","tags":["Mailing List","web"]},{"url":"https://www.openwall.com/lists/oss-security/2025/08/18/3","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598","tags":["Exploit","Third Party Advisory","article"]},{"url":"https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/","tags":["Exploit","Third Party Advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Jun/9","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/08/18/3","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4598","tags":["web","advisory"]},{"url":"https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598"},{"url":"https://github.com/advisories/GHSA-jx2m-wgq5-5qcj"},{"url":"https://bugzilla.redhat.com/2369242","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-22660.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1766079368.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/4xxx/CVE-2025-4598.json","tags":["advisory"]},{"url":"https://github.com/systemd/systemd","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-4598","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0178.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34331","tags":["report"]},{"url":"https://openwall.com/lists/oss-security/2025/05/29/3","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2025/msg00095.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1738","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1739","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1740","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1741","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1764","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1946","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22660.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4598","tags":["advisory","report"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-108006","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-109552","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-109902","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-112203","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-112205","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-113051","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-114414","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-115001","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-128767","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-129179","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-143029","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-143034","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-143036","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-53112","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-72702","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-72813","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18153.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:22660","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:18153","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502019-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205000","tags":["report"]},{"url":"https://bugzilla.suse.com/1208958","tags":["report"]},{"url":"https://bugzilla.suse.com/1211576","tags":["report"]},{"url":"https://bugzilla.suse.com/1211725","tags":["report"]},{"url":"https://bugzilla.suse.com/1215241","tags":["report"]},{"url":"https://bugzilla.suse.com/1243935","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4598","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502243-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502244-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242827","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502675-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520405-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236177","tags":["report"]},{"url":"https://bugzilla.suse.com/1237496","tags":["report"]},{"url":"https://bugzilla.suse.com/1241190","tags":["report"]},{"url":"https://bugzilla.suse.com/1242938","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520416-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520554-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1247074","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520597-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-4598","tags":["report"]},{"url":"https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt","tags":["report"]},{"url":"https://git.kernel.org/linus/b5325b2a270fcaf7b2a9a0f23d422ca8a5a8bdea","tags":["report"]},{"url":"https://github.com/systemd/systemd/commit/49f1f2d4a7612bbed5211a73d11d6a94fbe3bb69","tags":["report"]},{"url":"https://github.com/systemd/systemd/commit/0c49e0049b7665bb7769a13ef346fef92e1ad4d6","tags":["report"]},{"url":"https://github.com/systemd/systemd/commit/8fc7b2a211eb13ef1a94250b28e1c79cab8bdcb9","tags":["report"]},{"url":"https://github.com/systemd/systemd/commit/13902e025321242b1d95c6d8b4e482b37f58cdef","tags":["report"]},{"url":"https://github.com/systemd/systemd/commit/868d95577ec9f862580ad365726515459be582fc","tags":["report"]},{"url":"https://github.com/systemd/systemd/commit/e6a8687b939ab21854f12f59a3cce703e32768cf","tags":["report"]},{"url":"https://github.com/systemd/systemd/commit/76e0ab49c47965877c19772a2b3bf55f6417ca39","tags":["report"]},{"url":"https://github.com/systemd/systemd/commit/9ce8e3e449def92c75ada41b7d10c5bc3946be77","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7559-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-4598","title":"Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T13:13:26.049Z","modified":"2026-11-05T15:46:53.276Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-364"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2025-16486","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T13:13:26Z","modified":"2026-11-05T15:46:53Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T18:00:59.460287Z"}],"ghsa":[{"id":"GHSA-jx2m-wgq5-5qcj","title":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID...","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T15:30:31Z","modified":"2026-05-19T18:33:08Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-364"],"updated_at":"2026-11-02T15:08:12.634242Z"}],"nvd":[{"id":"CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T14:15:23.557Z","modified":"2026-11-05T16:17:19.133Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-364"],"updated_at":"2026-11-05T19:55:50.758755Z"}],"osv":[{"id":"AZL-64289","title":"CVE-2025-4598 affecting package systemd for versions less than 255-24","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T14:15:23Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"AZL-64292","title":"CVE-2025-4598 affecting package systemd for versions less than 250.3-23","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T14:15:23Z","modified":"2026-04-21T04:32:21.611453Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"AZL-66702","title":"CVE-2025-4598 affecting package kernel for versions less than 6.6.96.2-2","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T14:15:23Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"AZL-66704","title":"CVE-2025-4598 affecting package kernel for versions less than 5.15.186.1-1","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T14:15:23Z","modified":"2026-04-21T04:37:56.847495Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"CVE-2025-4598","title":"Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T13:13:26.049Z","modified":"2026-11-07T02:30:53.266604609Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-364"],"updated_at":"2026-11-07T03:07:57.024029Z"},{"id":"DEBIAN-CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.  A SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T14:15:23.557Z","modified":"2026-09-02T08:47:29.509022029Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2025-1738","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original\u0026apos;s privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner\u0026apos;s permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original\u0026apos;s SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.(CVE-2025-4598)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:53.113373262Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1739","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original\u0026apos;s privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner\u0026apos;s permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original\u0026apos;s SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.(CVE-2025-4598)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:52.375580361Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1740","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original\u0026apos;s privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner\u0026apos;s permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original\u0026apos;s SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.(CVE-2025-4598)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:52.862583878Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1741","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original\u0026apos;s privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner\u0026apos;s permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original\u0026apos;s SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.(CVE-2025-4598)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:52.084199971Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1764","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original\u0026apos;s privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner\u0026apos;s permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original\u0026apos;s SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.(CVE-2025-4598)","status":"published","published":"2025-07-11T11:08:51Z","modified":"2026-08-18T01:18:52.465932092Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1946","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original\u0026apos;s privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner\u0026apos;s permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original\u0026apos;s SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.(CVE-2025-4598)","status":"published","published":"2025-08-01T11:09:01Z","modified":"2026-08-18T01:18:56.243486605Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"RHSA-2025:22660","title":"Red Hat Security Advisory: systemd security update","status":"published","published":"2025-12-04T10:08:09Z","modified":"2026-09-02T10:06:33Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2026:18153","title":"Red Hat Security Advisory: systemd security update","status":"published","published":"2026-05-20T10:09:13Z","modified":"2026-09-02T10:10:55Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RLSA-2025:22660","title":"Moderate: systemd security update","description":"The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.\n\nSecurity Fix(es):\n\n* systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (CVE-2025-4598)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-21T16:27:07.11942Z","modified":"2026-05-21T17:00:05.350837261Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2026:18153","title":"Moderate: systemd security update","description":"The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.\n\nSecurity Fix(es):\n\n* systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (CVE-2025-4598)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:22.873936109Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process. A SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.","status":"published","published":"2025-05-30T14:15:00Z","modified":"2026-04-22T16:03:19.927023Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"ALSA-2025:22660","title":"Moderate: systemd security update","description":"The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.  \n\nSecurity Fix(es):  \n\n  * systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (CVE-2025-4598)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-03T00:00:00Z","modified":"2026-10-29T11:32:29.126524096Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"CLSA-2025-1766079368","title":"systemd: Fix of CVE-2025-4598","description":"- CVE-2025-4598: fixed race condition in systemd-coredump that exposes privileged\n  core dump data","status":"published","published":"2025-12-18T17:36:11Z","modified":"2026-06-01T00:31:33.38546461Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"DLA-4259-1","title":"systemd - security update","status":"published","published":"2025-07-30T00:00:00Z","modified":"2026-03-09T02:09:04.846537Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5931-1","title":"systemd - security update","status":"published","published":"2025-05-29T00:00:00Z","modified":"2026-03-09T01:20:44.730201Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0178","title":"Updated systemd packages fix security vulnerability","description":"Systemd-coredump: race condition that allows a local attacker to crash a\nsuid program and gain read access to the resulting core dump.\n(CVE-2025-4598)\n","status":"published","published":"2025-06-08T06:22:31Z","modified":"2026-04-16T04:43:26.345361634Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15299-1","title":"libsystemd0-257.7-1.1 on GA media","description":"These are all security issues fixed in the libsystemd0-257.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:36.643168Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2025:02019-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2025-4598: Race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).\n- CVE-2023-26604: Privilege escalation via the less pager (bsc#1208958).\n- CVE-2022-4415: systemd-coredump was not respecting fs.suid_dumpable kernel setting (bsc#1205000).\n\nOther bugfixes:\n\n- clarify passno and noauto combination in /etc/fstab (bsc#1211725)\n- handle -EINTR return from bus_poll() (bsc#1215241)\n- /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)\n","status":"published","published":"2025-06-19T07:58:03Z","modified":"2026-02-04T03:27:02.920906Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02243-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).\n","status":"published","published":"2025-07-08T08:43:32Z","modified":"2026-02-04T04:13:58.531137Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02244-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).\n\nOther bugfixes:\n\n- logs-show: get timestamp and boot ID only when necessary (bsc#1242827).\n","status":"published","published":"2025-07-08T08:44:03Z","modified":"2026-02-04T03:50:18.881379Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02675-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).\n","status":"published","published":"2025-08-04T13:59:35Z","modified":"2026-03-23T04:46:44.754986Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:20405-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- coredump: use %d in kernel core pattern (CVE-2025-4598)\n- Revert \"macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel\" (SUSE specific)\n- umount: do not move busy network mounts (bsc#1236177)\n- man/pstore.conf: pstore.conf template is not always installed in /etc\n- man: coredump.conf template is not always installed in /etc (bsc#1237496)\n- Don't write messages sent from users with UID falling into the container UID\n  range to the system journal. Daemons in the container don't talk to the\n  outside journald as they talk to the inner one directly, which does its\n  journal splitting based on shifted uids. (bsc#1242938)\n- This re-adds back the support for the persistent net name rules as well as\n  their generator since predictable naming scheme is still disabled by default\n  on Micro (via the `net.ifnames=0` boot option). (bsc#1241190)\n","status":"published","published":"2025-06-12T07:16:56Z","modified":"2026-03-23T04:48:15.818398Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20416-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- coredump: use %d in kernel core pattern (CVE-2025-4598)\n- Revert \"macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel\" (SUSE specific)\n- umount: do not move busy network mounts (bsc#1236177)\n- man/pstore.conf: pstore.conf template is not always installed in /etc\n- man: coredump.conf template is not always installed in /etc (bsc#1237496)\n- Don't write messages sent from users with UID falling into the container UID\n  range to the system journal. Daemons in the container don't talk to the\n  outside journald as they talk to the inner one directly, which does its\n  journal splitting based on shifted uids. (bsc#1242938)\n- This re-adds back the support for the persistent net name rules as well as\n  their generator since predictable naming scheme is still disabled by default\n  on Micro (via the `net.ifnames=0` boot option). (bsc#1241190)\n","status":"published","published":"2025-06-12T07:31:28Z","modified":"2026-03-23T04:48:15.902918Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20554-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- Remove the script used to help migrating the language and locale settings\n  located in /etc/sysconfig/language on old systems to the systemd default\n  locations (bsc#1247074)\n\n  The script was introduced more than 7 years ago and all systems running TW\n  should have been migrated since then. Moreover the installer supports the\n  systemd default locations since approximately SLE15. \n\n- triggers.systemd: skip update of hwdb, journal-catalog if executed during an\n  offline update.\n\n- logs-show: get timestamp and boot ID only when necessary (bsc#1242827)\n- sd-journal: drop to use Hashmap to manage journal files per boot ID\n- tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate\n- sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag\n- sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added\n- sd-journal: cache last entry offset and journal file state\n- sd-journal: fix typo in function name\n\n- coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)\n","status":"published","published":"2025-08-12T14:05:24Z","modified":"2026-03-23T04:50:51.781883Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20597-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- Remove the script used to help migrating the language and locale settings\n  located in /etc/sysconfig/language on old systems to the systemd default\n  locations (bsc#1247074)\n\n  The script was introduced more than 7 years ago and all systems running TW\n  should have been migrated since then. Moreover the installer supports the\n  systemd default locations since approximately SLE15. \n\n- triggers.systemd: skip update of hwdb, journal-catalog if executed during an\n  offline update.\n\n- logs-show: get timestamp and boot ID only when necessary (bsc#1242827)\n- sd-journal: drop to use Hashmap to manage journal files per boot ID\n- tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate\n- sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag\n- sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added\n- sd-journal: cache last entry offset and journal file state\n- sd-journal: fix typo in function name\n\n- coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)\n","status":"published","published":"2025-08-16T11:46:10Z","modified":"2026-03-23T04:50:52.799411Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7559-1","title":"systemd vulnerability","description":"Qualys discovered that systemd incorrectly handled metadata when processing\napplication crashes. An attacker could possibly use this issue to expose\nsensitive information.","status":"published","published":"2025-06-09T13:02:05Z","modified":"2026-04-22T10:59:21.916844Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}