Summary
[252-51.0.2]
- coredump: use %d in kernel core pattern - CVE-2025-4598
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | rhel-net-naming-sysattrs | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-boot-unsigned | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-container | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-devel | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-journal-remote | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-libs | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-oomd | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-pam | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-resolved | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-rpm-macros | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-udev | 0:252-51.0.2.el9 |
| Oracle Linux · 9 | systemd-ukify | 0:252-51.0.2.el9 |
Vulnerabilities 1
-
Medium 4.7
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc…