{"id":"CVE-2026-15059","aliases":["AZL-95640","AZL-95646","DEBIAN-CVE-2026-15059","EUVD-2026-55625","RHSA-2026:46016","UBUNTU-CVE-2026-15059","USN-8626-1"],"status":"published","title":"systemd-oomd: unprivileged users can terminate arbitrary processes","description":"Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00163,"percentile":0.05529,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22","CWE-59"],"published":"2026-08-10T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"systemd","fixed_in":["255-34"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"systemd-bootstrap","fixed_in":["250.3-20"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["261~rc3-1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-boot-unsigned","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-container","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-devel","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-journal-remote","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-libs","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-networkd","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-networkd-defaults","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-oomd-defaults","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-pam","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-resolved","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-rpm-macros","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-shared","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-repart","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-shutdown","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-sysusers","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-tmpfiles","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-sysusers","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-tests","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-udev","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"systemd-ukify","fixed_in":["0:261.2-1.hum1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"systemd","fixed_in":["249.11-0ubuntu3.22"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"systemd","fixed_in":["255.4-1ubuntu8.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"systemd","fixed_in":["259.5-0ubuntu3.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-34"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"systemd-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"250.3-20"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["252.11-1","252.11-1~deb12u1","252.12-1~deb12u1","252.14-1~deb12u1","252.16-1~deb12u1","252.17-1~deb12u1","252.18-1~deb12u1","252.19-1~deb12u1","252.20-1~deb12u1","252.21-1~deb12u1","252.22-1~deb12u1","252.23-1~deb12u1","252.24-1~deb12u1","252.25-1~deb12u1","252.26-1~deb12u1","252.26-1~deb12u2","252.26-1~deb12u2~bpo11+1","252.27-1~deb12u1","252.28-1~deb12u1","252.29-1~deb12u1","252.29-1~deb12u1~bpo11+1","252.30-1~deb12u1","252.30-1~deb12u2","252.31-1~deb12u1","252.32-1~deb12u1","252.33-1~deb12u1","252.36-1~deb12u1","252.38-1~deb12u1","252.39-1~deb12u1","252.39-1~deb12u2","252.6-1","252.6-1+loong64","253-1","253-2","253-3","253-4","253.5-1","253~rc2-1","253~rc3-1","254-1","254.1-1","254.1-2","254.1-3","254.14-1~bpo12+1","254.15-1~bpo12+1","254.16-1~bpo12+1","254.22-1~bpo12+1","254.26-1~bpo12+1","254.3-1","254.4-1","254.5-1","254.5-1~bpo12+1","254.5-1~bpo12+2","254.5-1~bpo12+3","254~rc1-1","254~rc1-2","254~rc1-3","254~rc1-4","254~rc2-1","254~rc2-2","254~rc2-3","254~rc3-1","254~rc3-2","254~rc3-3","255-1","255.1-1","255.1-2","255.1-3","255.2-1","255.2-2","255.2-3","255.2-4","255.3-1","255.3-2","255.4-1","255.5-1","255~rc1-1","255~rc1-2","255~rc1-3","255~rc1-4","255~rc2-1","255~rc2-2","255~rc2-3","255~rc3-1","255~rc3-2","255~rc3-3","255~rc4-1","255~rc4-2","256-1","256-2","256.1-1","256.1-2","256.2-1","256.4-1","256.4-2","256.4-3","256.5-1","256.5-2","256.6-1","256.7-1","256.7-2","256.7-3","256~rc1-1~exp","256~rc1-1~exp2","256~rc2-1","256~rc2-2","256~rc2-3","256~rc3-1","256~rc3-2","256~rc3-3","256~rc3-4","256~rc3-5","256~rc3-6","256~rc3-7","256~rc4-1","257-1","257-2","257.1-1","257.1-2","257.1-3","257.1-4","257.1-5","257.1-6","257.1-7","257.13-1~deb13u1","257.2-1","257.2-2","257.2-3","257.3-1","257.4-1","257.4-2","257.4-3","257.4-4","257.4-5","257.4-6","257.4-7","257.4-8","257.4-9","257.5-1","257.5-2","257.6-1","257.7-1","257.8-1~deb13u1","257.8-1~deb13u2","257.9-1~deb13u1","257~rc1-1","257~rc1-2","257~rc1-3","257~rc1-4","257~rc2-1","257~rc2-2","257~rc2-3","257~rc3-1","258-1","258.1-1","258.1-2","258~rc1-1","258~rc2-1","258~rc2-2","258~rc3-1","258~rc4-1","259-1","259.1-1","259~rc1-1","259~rc2-1","259~rc3-1","260-1","260.1-1","260~rc1-1","260~rc1-2","260~rc2-1","260~rc3-1","260~rc4-1","261-1","261-2","261.1-1","261.1-2","261.1-3","261.2-1","261~rc1-1","261~rc2-1","261~rc3-1","261~rc4-1","262-1","262.1-1","262~rc1-1","262~rc1-2","262~rc2-1","262~rc3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["257.13-1~deb13u1","257.7-1","257.8-1~deb13u1","257.8-1~deb13u2","257.9-1~deb13u1","258-1","258.1-1","258.1-2","258~rc1-1","258~rc2-1","258~rc2-2","258~rc3-1","258~rc4-1","259-1","259.1-1","259~rc1-1","259~rc2-1","259~rc3-1","260-1","260.1-1","260~rc1-1","260~rc1-2","260~rc2-1","260~rc3-1","260~rc4-1","261-1","261-2","261.1-1","261.1-2","261.1-3","261.2-1","261~rc1-1","261~rc2-1","261~rc3-1","261~rc4-1","262-1","262.1-1","262~rc1-1","262~rc1-2","262~rc2-1","262~rc3-1"]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"261~rc3-1"}]}],"versions":["257.13-1~deb13u1","257.7-1","257.8-1~deb13u1","257.8-1~deb13u2","257.9-1~deb13u1","258-1","258.1-1","258.1-2","258~rc1-1","258~rc2-1","258~rc2-2","258~rc3-1","258~rc4-1","259-1","259.1-1","259~rc1-1","259~rc2-1","259~rc3-1","260-1","260.1-1","260~rc1-1","260~rc1-2","260~rc2-1","260~rc3-1","260~rc4-1","261~rc1-1","261~rc2-1"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-networkd-defaults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-oomd-defaults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-shared","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-repart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-shutdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-sysusers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-tmpfiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-sysusers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-ukify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:261.2-1.hum1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.11-0ubuntu3.22"}]}],"versions":["248.3-1ubuntu8","249.5-2ubuntu1","249.5-2ubuntu2","249.5-2ubuntu3","249.5-2ubuntu4","249.9-0ubuntu2","249.10-0ubuntu1","249.10-0ubuntu2","249.11-0ubuntu1","249.11-0ubuntu2","249.11-0ubuntu3","249.11-0ubuntu3.1","249.11-0ubuntu3.3","249.11-0ubuntu3.4","249.11-0ubuntu3.6","249.11-0ubuntu3.7","249.11-0ubuntu3.9","249.11-0ubuntu3.10","249.11-0ubuntu3.11","249.11-0ubuntu3.12","249.11-0ubuntu3.15","249.11-0ubuntu3.16","249.11-0ubuntu3.17","249.11-0ubuntu3.19","249.11-0ubuntu3.20","249.11-0ubuntu3.21"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255.4-1ubuntu8.17"}]}],"versions":["253.5-1ubuntu6","253.5-1ubuntu7","255.2-3ubuntu2","255.4-1ubuntu5","255.4-1ubuntu6","255.4-1ubuntu7","255.4-1ubuntu8","255.4-1ubuntu8.1","255.4-1ubuntu8.2","255.4-1ubuntu8.4","255.4-1ubuntu8.5","255.4-1ubuntu8.6","255.4-1ubuntu8.8","255.4-1ubuntu8.10","255.4-1ubuntu8.11","255.4-1ubuntu8.12","255.4-1ubuntu8.14","255.4-1ubuntu8.15","255.4-1ubuntu8.16"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"259.5-0ubuntu3.4"}]}],"versions":["257.9-0ubuntu2","259-1ubuntu2","259-1ubuntu3","259.3-0ubuntu1","259.5-0ubuntu1","259.5-0ubuntu2","259.5-0ubuntu3","259.5-0ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.11-0ubuntu3.22"}]}],"versions":["248.3-1ubuntu8","249.5-2ubuntu1","249.5-2ubuntu2","249.5-2ubuntu3","249.5-2ubuntu4","249.9-0ubuntu2","249.10-0ubuntu1","249.10-0ubuntu2","249.11-0ubuntu1","249.11-0ubuntu2","249.11-0ubuntu3","249.11-0ubuntu3.1","249.11-0ubuntu3.3","249.11-0ubuntu3.4","249.11-0ubuntu3.6","249.11-0ubuntu3.7","249.11-0ubuntu3.9","249.11-0ubuntu3.10","249.11-0ubuntu3.11","249.11-0ubuntu3.12","249.11-0ubuntu3.15","249.11-0ubuntu3.16","249.11-0ubuntu3.17","249.11-0ubuntu3.19","249.11-0ubuntu3.20","249.11-0ubuntu3.21"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255.4-1ubuntu8.17"}]}],"versions":["253.5-1ubuntu6","253.5-1ubuntu7","255.2-3ubuntu2","255.4-1ubuntu5","255.4-1ubuntu6","255.4-1ubuntu7","255.4-1ubuntu8","255.4-1ubuntu8.1","255.4-1ubuntu8.2","255.4-1ubuntu8.4","255.4-1ubuntu8.5","255.4-1ubuntu8.6","255.4-1ubuntu8.8","255.4-1ubuntu8.10","255.4-1ubuntu8.11","255.4-1ubuntu8.12","255.4-1ubuntu8.14","255.4-1ubuntu8.15","255.4-1ubuntu8.16"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"259.5-0ubuntu3.4"}]}],"versions":["257.9-0ubuntu2","259-1ubuntu2","259-1ubuntu3","259.3-0ubuntu1","259.5-0ubuntu1","259.5-0ubuntu2","259.5-0ubuntu3","259.5-0ubuntu3.3"]}],"products":[{"vendor":"systemd","product":"systemd-oomd"}],"references":[{"url":"https://github.com/systemd/systemd/security/advisories/GHSA-652q-wxr6-h5j6","tags":["exploit","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15059","tags":["web","advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-15059","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46016","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15059","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46016.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15059","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2026-15059","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8626-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-15060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-16742","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-15059","title":"systemd-oomd: unprivileged users can terminate arbitrary processes","description":"Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.","status":"published","published":"2026-08-10T13:02:31.716Z","modified":"2026-08-10T17:58:08.288Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-22","CWE-59"],"updated_at":"2026-11-02T13:47:39.876248Z"}],"euvd":[{"id":"EUVD-2026-55625","description":"Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.","status":"published","published":"2026-08-10T13:02:31Z","modified":"2026-08-10T17:58:08Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T18:02:01.104981Z"}],"nvd":[{"id":"CVE-2026-15059","description":"Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.","status":"published","published":"2026-08-10T14:17:20.76Z","modified":"2026-10-23T20:10:00.16Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-22","CWE-59"],"updated_at":"2026-11-02T14:12:36.102748Z"}],"osv":[{"id":"DEBIAN-CVE-2026-15059","description":"Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.","status":"published","published":"2026-08-10T14:17:20.76Z","modified":"2026-10-24T10:00:30.896026118Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:51.8748Z"},{"id":"RHSA-2026:46016","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-09-09T10:15:49Z","modified":"2026-10-06T10:31:34.759433758Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"UBUNTU-CVE-2026-15059","description":"Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.","status":"published","published":"2026-08-10T00:00:00Z","modified":"2026-08-13T03:00:46.396148075Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"AZL-95640","title":"CVE-2026-15059 affecting package systemd for versions less than 255-34","description":"Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.","status":"published","published":"2026-08-10T14:17:20Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:26.077208Z"},{"id":"AZL-95646","title":"CVE-2026-15059 affecting package systemd-bootstrap for versions less than 250.3-20","description":"Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.","status":"published","published":"2026-08-10T14:17:20Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:26.077208Z"},{"id":"USN-8626-1","title":"systemd vulnerabilities","description":"It was discovered that systemd-homed did not properly verify the signature\nof home records. A local attacker could possibly use this issue to add\narbitrary system groups to a logged-in user and gain elevated privileges.\n(CVE-2026-16742)\n\nIt was discovered that systemd-machined incorrectly handled certain polkit\nauthorization checks. A local attacker could possibly use this issue to\nterminate arbitrary processes, including privileged ones. This issue only\naffected Ubuntu 26.04 LTS. (CVE-2026-15060)\n\nIt was discovered that systemd-oomd did not properly validate certain IPC\nrequests. A local attacker could possibly use this issue to terminate\narbitrary processes. (CVE-2026-15059)","status":"published","published":"2026-08-10T13:46:07Z","modified":"2026-08-12T04:30:19.869390827Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}