Systemd vulnerabilities

Products

• Systemd 25

Newest

• systemd systemd-homed systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path CVE-2026-16742 Fix available 6.7 MediumAugust 10, 2026
• systemd systemd-machined systemd-machined: unprivileged users can terminate arbitrary processes CVE-2026-15060 Fix available 4.7 MediumAugust 10, 2026
• systemd systemd-oomd systemd-oomd: unprivileged users can terminate arbitrary processes CVE-2026-15059 Fix available 5.5 MediumAugust 10, 2026
• systemd In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary... CVE-2026-40228 Fix available 2.9 LowApril 10, 2026
• systemd In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call... CVE-2026-40227 Fix available 6.2 MediumApril 10, 2026
• systemd In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted... CVE-2026-40226 Fix available 6.4 MediumApril 10, 2026
• systemd In udev in systemd before 260, local root execution can occur via malicious hardware devices and... CVE-2026-40225 Fix available 6.4 MediumApril 10, 2026
• systemd In systemd 259 before 260, there is local privilege escalation in systemd-machined because... CVE-2026-40224 Fix available 6.7 MediumApril 10, 2026
• systemd In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes... CVE-2026-40223 Fix available 4.7 MediumApril 10, 2026
• systemd systemd: Local unprivileged user can trigger an assert CVE-2026-29111 Fix available 5.5 MediumMarch 23, 2026
• systemd A vulnerability was found in systemd. This security flaw can cause a local information leak due... CVE-2022-4415 Fix available 5.5 MediumDecember 27, 2022
• systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 more An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c.... CVE-2022-3821 Fix available 5.5 MediumNovember 8, 2022
• systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 more A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial... CVE-2021-3997 Fix available 5.5 MediumJanuary 10, 2022
• systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 more An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP... CVE-2020-13529 Fix available 6.1 MediumMay 10, 2021
• systemd systemd 37-1 does not properly handle non-existent services, which causes a denial of service ... CVE-2012-1101 Fix available 5.5 MediumMarch 11, 2020
• [unknown] systemd, debian linux, redhat ceph storage +7 more +9 more A heap use-after-free vulnerability was found in systemd before version v245-rc1, where... CVE-2020-1712 Public exploitFix available 7.8 HighFebruary 5, 2020
• [freedesktop.org] systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 more It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID... CVE-2019-3843 Public exploitFix available 4.5 MediumApril 26, 2019
• [freedesktop.org] systemd, canonical ubuntu linux, netapp cn1610 firmware +3 more +5 more It was discovered that a systemd service that uses DynamicUser property can get new privileges... CVE-2019-3844 Public exploitFix available 4.5 MediumApril 26, 2019
• systemd, debian linux, fedoraproject fedora +1 more +3 more In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the... CVE-2019-3842 Public exploitFix available 4.5 MediumApril 8, 2019
• debian linux, systemd, redhat enterprise linux desktop +5 more +7 more A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise... CVE-2019-3815 Fix available 3.3 LowJanuary 28, 2019
• systemd, canonical ubuntu linux, netapp active iq performance analytics services +2 more +4 more It was discovered systemd does not correctly check the content of PIDFile files before using it... CVE-2018-16888 Fix available 4.4 MediumJanuary 14, 2019
• systemd, canonical ubuntu linux, debian linux +18 more +20 more An out of bounds read was discovered in systemd-journald in the way it parses log messages that... CVE-2018-16866 Fix available 4.3 MediumJanuary 11, 2019
• systemd, canonical ubuntu linux, debian linux +8 more +10 more An allocation of memory without limits, that could result in the stack clashing with another... CVE-2018-16865 Fix available 7.5 HighJanuary 9, 2019
• systemd, canonical ubuntu linux, debian linux +8 more +10 more An allocation of memory without limits, that could result in the stack clashing with another... CVE-2018-16864 Fix available 7.4 HighJanuary 9, 2019
• systemd, canonical ubuntu linux, debian linux +6 more +8 more Out-of-Bounds write in systemd-networkd dhcpv6 option handling CVE-2018-15688 Fix available 8.8 HighOctober 26, 2018
• systemd, canonical ubuntu linux +1 more systemd: chown_one() can dereference symlinks CVE-2018-15687 Public exploitFix available 7.8 HighOctober 26, 2018
• systemd, canonical ubuntu linux, debian linux +1 more +3 more systemd: reexec state injection: fgets() on overlong lines leads to line splitting CVE-2018-15686 Public exploitFix available 7.0 HighOctober 26, 2018
• red hat, inc. systemd, canonical ubuntu linux, debian linux +8 more +10 more In systemd prior to 234 a race condition exists between .mount and .automount units such that... CVE-2018-1049 Public exploitFix available 5.9 MediumJanuary 17, 2018