{"id":"CVE-2026-4105","aliases":["CLSA-2026-1776099155","CLSA-2026-1776345550","DEBIAN-CVE-2026-4105","EUVD-2026-11774","GHSA-4h6x-r8vx-3862","OESA-2026-1910","OESA-2026-1911","OESA-2026-1912","OESA-2026-1913","OESA-2026-1914","OESA-2026-1915","RHSA-2026:7299","ROOT-OS-DEBIAN-12-CVE-2026-4105","ROOT-OS-DEBIAN-13-CVE-2026-4105","SUSE-SU-2026:0990-1","SUSE-SU-2026:0991-1","SUSE-SU-2026:1040-1","SUSE-SU-2026:1061-1","SUSE-SU-2026:20822-1","SUSE-SU-2026:20826-1","SUSE-SU-2026:20998-1","SUSE-SU-2026:21003-1","SUSE-SU-2026:21144-1","SUSE-SU-2026:23454-1","SUSE-SU-2026:23470-1","SUSE-SU-2026:23620-1","UBUNTU-CVE-2026-4105","openSUSE-SU-2026:10624-1","openSUSE-SU-2026:20471-1","openSUSE-SU-2026:21754-1"],"status":"published","title":"Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method","description":"A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00165,"percentile":0.05793,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2026-03-13T08:52:08Z","modified":"2026-11-06T07:51:57Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rhel-net-naming-sysattrs","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-boot-unsigned","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-container","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-devel","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-journal-remote","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-libs","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-oomd","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-pam","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-resolved","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-rpm-macros","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-standalone-sysusers","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-standalone-tmpfiles","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-udev","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-ukify","fixed_in":["252-51.el9_6.3.alma.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"systemd","fixed_in":["252.39-1~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"systemd","fixed_in":["257.13-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["260~rc3-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"systemd","fixed_in":["243-88.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"systemd","fixed_in":["249-112.oe2203sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"systemd","fixed_in":["228-157.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"systemd","fixed_in":["228-157.75.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-oomd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-sysusers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-standalone-tmpfiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-14.el9_2.3.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rhel-net-naming-sysattrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-oomd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-standalone-sysusers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-standalone-tmpfiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"systemd-ukify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252-51.el9_6.3.alma.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"252.39-1~deb12u2"}]}],"versions":["252.11-1","252.11-1~deb12u1","252.12-1~deb12u1","252.14-1~deb12u1","252.16-1~deb12u1","252.17-1~deb12u1","252.18-1~deb12u1","252.19-1~deb12u1","252.20-1~deb12u1","252.21-1~deb12u1","252.22-1~deb12u1","252.23-1~deb12u1","252.24-1~deb12u1","252.25-1~deb12u1","252.26-1~deb12u1","252.26-1~deb12u2","252.26-1~deb12u2~bpo11+1","252.27-1~deb12u1","252.28-1~deb12u1","252.29-1~deb12u1","252.29-1~deb12u1~bpo11+1","252.30-1~deb12u1","252.30-1~deb12u2","252.31-1~deb12u1","252.32-1~deb12u1","252.33-1~deb12u1","252.36-1~deb12u1","252.38-1~deb12u1","252.39-1~deb12u1","252.6-1","252.6-1+loong64"]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-1~deb13u1"}]}],"versions":["257.7-1","257.8-1~deb13u1","257.8-1~deb13u2","257.9-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"260~rc3-1"}]}],"versions":["257.13-1~deb13u1","257.7-1","257.8-1~deb13u1","257.8-1~deb13u2","257.9-1~deb13u1","258-1","258.1-1","258.1-2","258~rc1-1","258~rc2-1","258~rc2-2","258~rc3-1","258~rc4-1","259-1","259.1-1","259~rc1-1","259~rc2-1","259~rc3-1","260~rc1-1","260~rc1-2","260~rc2-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-57.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-57.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-88.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249-112.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-57.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"255-57.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-boot-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-networkd-defaults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-oomd-defaults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-shared","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-repart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-shutdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-sysusers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-standalone-tmpfiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-sysusers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"systemd-ukify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:260.1-2.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.27-150600.4.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.27-150600.4.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.27-150600.4.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.27-150600.4.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.27-150600.4.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.17-150400.8.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.27-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"254.27-slfo.1.1_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"259.5-1.3"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"systemd-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.4.1"}]}],"bundled":4}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift container platform 4"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:7299","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4105","tags":["vdb-entry","x_refsource_REDHAT","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447262","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://github.com/systemd/systemd/security/advisories/GHSA-4h6x-r8vx-3862","tags":["advisory","article","report"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1776099155.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776345550.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-4105","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1910","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29111","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4105","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1911","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1912","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1913","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1914","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1915","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40228","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40226","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40225","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40224","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40223","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-29111","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40227","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7299.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4105","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450505","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-29111","tags":["advisory"]},{"url":"https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a","tags":["article"]},{"url":"https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6","tags":["article"]},{"url":"https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412","tags":["article"]},{"url":"https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd","tags":["article"]},{"url":"https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f","tags":["article"]},{"url":"https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f","tags":["article"]},{"url":"https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69","tags":["article"]},{"url":"https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6","tags":["article"]},{"url":"https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c","tags":["article"]},{"url":"https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8","tags":["article"]},{"url":"https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457318","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40223","tags":["advisory"]},{"url":"https://github.com/systemd/systemd/security/advisories/GHSA-x4h8-rrrg-q78f","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40224","tags":["advisory"]},{"url":"https://github.com/systemd/systemd/security/advisories/GHSA-6pwp-j5vg-5j6m","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40225","tags":["advisory"]},{"url":"https://github.com/systemd/systemd/security/advisories/GHSA-vpfq-8p5f-jcqx","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457326","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40226","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40226","tags":["advisory"]},{"url":"https://github.com/systemd/systemd/security/advisories/GHSA-9mj4-rrc3-gjcx","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40227","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40227","tags":["advisory"]},{"url":"https://github.com/systemd/systemd/security/advisories/GHSA-848h-497j-8vjq","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457316","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40228","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40228","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/08/1","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260990-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259418","tags":["report"]},{"url":"https://bugzilla.suse.com/1259650","tags":["report"]},{"url":"https://bugzilla.suse.com/1259697","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4105","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260991-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261040-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261061-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620822-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1228081","tags":["report"]},{"url":"https://bugzilla.suse.com/1254293","tags":["report"]},{"url":"https://bugzilla.suse.com/1256427","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620826-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620998-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1255326","tags":["report"]},{"url":"https://bugzilla.suse.com/1258344","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621003-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621144-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623454-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237515","tags":["report"]},{"url":"https://bugzilla.suse.com/1254924","tags":["report"]},{"url":"https://bugzilla.suse.com/1261400","tags":["report"]},{"url":"https://bugzilla.suse.com/1271444","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40226","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623470-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623620-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-4105","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-4105","title":"Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method","description":"A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.","status":"published","published":"2026-03-13T08:52:08.179Z","modified":"2026-11-06T07:51:57.147Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-06T08:57:32.08691Z"}],"euvd":[{"id":"EUVD-2026-11774","description":"A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.","status":"published","published":"2026-03-13T08:52:08Z","modified":"2026-11-06T07:51:57Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-06T09:04:28.113071Z"}],"nvd":[{"id":"CVE-2026-4105","description":"A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.","status":"published","published":"2026-03-13T19:55:13.673Z","modified":"2026-11-06T08:17:26.6Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-06T11:59:55.485307Z"}],"osv":[{"id":"CVE-2026-4105","description":"A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.","status":"published","published":"2026-03-13T19:55:13.673Z","modified":"2026-09-29T18:26:38.865450678Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:03.424067Z"},{"id":"DEBIAN-CVE-2026-4105","description":"A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.","status":"published","published":"2026-03-13T19:55:13.673Z","modified":"2026-11-07T09:47:38.420093088Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-07T10:14:19.880839Z"},{"id":"OESA-2026-1910","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nsystemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.(CVE-2026-29111)\n\nA flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.(CVE-2026-4105)","status":"published","published":"2026-04-17T11:10:55Z","modified":"2026-08-18T01:19:55.326677895Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1911","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nsystemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.(CVE-2026-29111)\n\nA flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.(CVE-2026-4105)","status":"published","published":"2026-04-17T11:10:55Z","modified":"2026-08-18T01:19:55.285896306Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1912","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.(CVE-2026-4105)","status":"published","published":"2026-04-17T11:10:55Z","modified":"2026-08-18T01:19:55.370580789Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1913","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.(CVE-2026-4105)","status":"published","published":"2026-04-17T11:10:55Z","modified":"2026-08-18T01:19:55.315015795Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1914","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nsystemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.(CVE-2026-29111)\n\nA flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.(CVE-2026-4105)","status":"published","published":"2026-04-17T11:10:55Z","modified":"2026-08-18T01:19:55.321409649Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1915","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\n\nsystemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.(CVE-2026-29111)\n\nA flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.(CVE-2026-4105)","status":"published","published":"2026-04-17T11:10:55Z","modified":"2026-08-18T01:19:55.32523375Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:7299","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:11:09Z","modified":"2026-10-15T10:26:18Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-4105","title":"CVE-2026-4105 in rootio-systemd - Patched by Root","description":"Root has patched CVE-2026-4105 in the rootio-systemd package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-05-12T10:07:41Z","modified":"2026-08-20T14:00:14.308269724Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:32.037361Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-4105","title":"CVE-2026-4105 in rootio-systemd - Patched by Root","description":"Root has patched CVE-2026-4105 in the rootio-systemd package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-05-12T10:05:29Z","modified":"2026-07-27T14:00:19.373599671Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"UBUNTU-CVE-2026-4105","description":"A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.","status":"withdrawn","published":"2026-03-17T00:00:00Z","modified":"2026-03-19T08:32:53.250873Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"CLSA-2026-1776099155","title":"systemd: Fix of 2 CVEs","description":"- CVE-2026-29111: validate input cgroup path in GetUnitByControlGroup to prevent\n  PID 1 assert/freeze on spurious IPC API calls\n- CVE-2026-4105: reject invalid class types when registering machines in\n  systemd-machined to prevent privilege escalation","status":"published","published":"2026-04-13T16:52:40Z","modified":"2026-06-01T00:32:21.629755722Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776345550","title":"systemd: Fix of CVE-2026-4105","description":"- CVE-2026-4105: machined: reject invalid class types when registering machines","status":"published","published":"2026-04-16T13:19:15Z","modified":"2026-06-01T00:32:47.921098933Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"openSUSE-SU-2026:10624-1","title":"libsystemd0-259.5-1.3 on GA media","description":"These are all security issues fixed in the libsystemd0-259.5-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-26T00:00:00Z","modified":"2026-04-27T08:15:17.12568Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20471-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\nUpdate to systemd v257.13:\n\nSecurity issues:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).\n- udev: local root execution via malicious hardware devices and unsanitized kernel output (bsc#1259697).\n\nNon security issues:\n\n- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853).\n- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)\n- terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)\n\nChangelog:\n\n- 6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)\n- 03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)\n- 54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)\n- fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)\n\nFor a complete list of changes, visit:\n https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28\n","status":"published","published":"2026-04-07T15:17:05Z","modified":"2026-04-10T18:24:11.842426Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:21754-1","title":"Security update for systemd","description":"This update for systemd fixes the following issue:\n\nSecurity issue fixed:\n\n- CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on\n  the authentication path (bsc#1271444).\n\nNon security issue fixed:\n\n- `systemd-resolved` fails to start due to write access to `tmpfs` denied (bsc#1237515).\n","status":"published","published":"2026-09-03T20:41:28Z","modified":"2026-09-09T18:23:14.069087279Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:0990-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).\n- udev: check for invalid chars in various fields received from the kernel (bsc#1259697).  \n\nChangelog:\n\n- 566517ffcb machined: reject invalid class types when registering machines\n- abbdd89d78 udev: fix review mixup\n- c9cedd26be udev-builtin-net-id: print cescaped bad attributes\n- c0f4ec3db9 udev: ensure tag parsing stays within bounds\n- 38afcb73cc udev: ensure there is space for trailing NUL before calling sprintf\n- a64247de62 udev: check for invalid chars in various fields received from the kernel\n- ecce32966e core/cgroup: avoid one unnecessary strjoina()\n- 6abd2b5bd2 core: validate input cgroup path more prudently\n- 2d7d93d6c1 alloc-util: add strdupa_safe() + strndupa_safe() and use it everywhere\n","status":"published","published":"2026-03-24T07:22:51Z","modified":"2026-03-25T08:32:16.303875Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:0991-1","title":"Security update for systemd","description":"This update for systemd fixes the following issue:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- udev: check for invalid chars in various fields received from the kernel (bsc#1259697).  \n\nChangelog:\n\n cbf8ee66ee machined: reject invalid class types when registering machines\n 1a55ad48da udev: fix review mixup\n 1eba76668c udev-builtin-net-id: print cescaped bad attributes\n cbd4b55380 udev: ensure tag parsing stays within bounds\n 5973d3b1cc udev: ensure there is space for trailing NUL before calling sprintf\n f038eb6c8b udev: check for invalid chars in various fields received from the kernel\n","status":"published","published":"2026-03-24T07:23:00Z","modified":"2026-03-25T08:30:52.472722Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1040-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).\n- udev: check for invalid chars in various fields received from the kernel (bsc#1259697).\n\nChangelog:\n\n- a943e3ce2f machined: reject invalid class types when registering machines\n- 71593f77db udev: fix review mixup\n- 73a89810b4 udev-builtin-net-id: print cescaped bad attributes\n- 0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX\n- 40905232e2 udev: ensure tag parsing stays within bounds\n- 7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf\n- d018ac1ea3 udev: check for invalid chars in various fields received from the kernel\n- aef6e11921 core/cgroup: avoid one unnecessary strjoina()\n- cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements\n- 26a748f727 core: validate input cgroup path more prudently\n- 99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs\n","status":"published","published":"2026-03-25T12:43:09Z","modified":"2026-03-27T17:23:47.188576Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1061-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).\n- udev: check for invalid chars in various fields received from the kernel (bsc#1259697).  \n\nChangelog:\n\n- 6a38d88a42 machined: reject invalid class types when registering machines\n- 8c9a592e5a udev: fix review mixup\n- b57007a917 udev-builtin-net-id: print cescaped bad attributes\n- ee23c7604b udev-builtin-net_id: do not assume the current interface name is ethX\n- 0f63e799e6 udev: ensure tag parsing stays within bounds\n- 046f52ec12 udev: ensure there is space for trailing NUL before calling sprintf\n- 5be21460ce udev: check for invalid chars in various fields received from the kernel\n- 9559607b16 core/cgroup: avoid one unnecessary strjoina()\n- fcae348ca4 core: validate input cgroup path more prudently\n- a3ca6b3031 alloc-util: add strdupa_safe() + strndupa_safe() and use it everywhere\n- 08125d6b06 units: add dep on systemd-logind.service by user@.service\n","status":"published","published":"2026-03-26T10:35:55Z","modified":"2026-03-27T08:48:27.549972Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:20822-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\nSecurity issues:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).\n- udev: check for invalid chars in various fields received from the kernel (bsc#1259697).\n\nNon security issues:\n\n- Name libsystemd-{shared,core} based on the major version of systemd and the\n  package release number (bsc#1228081, bsc#1256427)\n- detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)\n\nChangelog:\n\n- a943e3ce2f machined: reject invalid class types when registering machines\n- 71593f77db udev: fix review mixup\n- 73a89810b4 udev-builtin-net-id: print cescaped bad attributes\n- 0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX\n- 40905232e2 udev: ensure tag parsing stays within bounds\n- 7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf\n- d018ac1ea3 udev: check for invalid chars in various fields received from the kernel\n- aef6e11921 core/cgroup: avoid one unnecessary strjoina()\n- cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements\n- 26a748f727 core: validate input cgroup path more prudently\n- 99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs\n- 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386\n","status":"published","published":"2026-03-24T09:27:18Z","modified":"2026-03-26T17:23:49.644144Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20826-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).\n- udev: check for invalid chars in various fields received from the kernel (bsc#1259697).  \n\nChangelog:\n\n- a943e3ce2f machined: reject invalid class types when registering machines \n- 71593f77db udev: fix review mixup\n- 73a89810b4 udev-builtin-net-id: print cescaped bad attributes\n- 0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX\n- 40905232e2 udev: ensure tag parsing stays within bounds\n- 7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf\n- d018ac1ea3 udev: check for invalid chars in various fields received from the kernel\n- aef6e11921 core/cgroup: avoid one unnecessary strjoina()\n- cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements\n- 26a748f727 core: validate input cgroup path more prudently \n- 99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs\n","status":"published","published":"2026-03-24T09:34:46Z","modified":"2026-03-27T17:23:47.01379Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20998-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\nUpdate to systemd v257.13:\n\nSecurity issues:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).\n- udev: local root execution via malicious hardware devices and unsanitized kernel output (bsc#1259697).\n\nNon security issues:\n\n- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853).\n- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)\n- terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)\n\nChangelog:\n\n- 6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)\n- 03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)\n- 54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)\n- fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)\n\nFor a complete list of changes, visit:\n https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28\n","status":"published","published":"2026-04-07T15:08:39Z","modified":"2026-07-09T18:24:05.580004478Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:21003-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\nUpdate to systemd v257.13:\n\nSecurity issues:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).\n- udev: local root execution via malicious hardware devices and unsanitized kernel output (bsc#1259697).\n\nNon security issues:\n\n- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853).\n- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)\n- terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)\n\nChangelog:\n\n- 6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)\n- 03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)\n- 54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)\n- fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)\n\nFor a complete list of changes, visit:\n https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28\n","status":"published","published":"2026-04-07T15:06:51Z","modified":"2026-04-14T18:26:24.912213Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:21144-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\nUpdate to systemd v257.13:\n\nSecurity issues:\n\n- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).\n- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).\n- udev: local root execution via malicious hardware devices and unsanitized kernel output (bsc#1259697).\n\nNon security issues:\n\n- Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853).\n- Sign systemd-boot EFI binary on aarch64 (bsc#1258344)\n- terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)\n\nChangelog:\n\n- 6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)\n- 03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697)\n- 54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111)\n- fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326)\n\nFor a complete list of changes, visit:\n https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28\n","status":"published","published":"2026-04-07T15:06:51Z","modified":"2026-04-22T18:24:34.66072Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:23454-1","title":"Security update for systemd","description":"This update for systemd fixes the following issue:\n\nSecurity issue fixed:\n\n- CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on\n  the authentication path (bsc#1271444).\n\nNon security issue fixed:\n\n- `systemd-resolved` fails to start due to write access to `tmpfs` denied (bsc#1237515).\n","status":"published","published":"2026-09-03T20:25:16Z","modified":"2026-09-14T18:23:11.26275341Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23470-1","title":"Security update for systemd","description":"This update for systemd fixes the following issue:\n\nSecurity issue fixed:\n\n- CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on\n  the authentication path (bsc#1271444).\n\nNon security issue fixed:\n\n- `systemd-resolved` fails to start due to write access to `tmpfs` denied (bsc#1237515).\n","status":"published","published":"2026-09-03T20:31:34Z","modified":"2026-09-14T18:23:12.179664526Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23620-1","title":"Security update for systemd","description":"This update for systemd fixes the following issue:\n\nSecurity issue fixed:\n\n- CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on\n  the authentication path (bsc#1271444).\n\nNon security issue fixed:\n\n- `systemd-resolved` fails to start due to write access to `tmpfs` denied (bsc#1237515).\n","status":"published","published":"2026-09-03T20:31:34Z","modified":"2026-09-29T18:23:19.929717072Z","updated_at":"2026-11-02T15:54:03.991985Z"}]}}