Skip to content
OpenAdvisories
Medium RHSA-2026:13677 1 CVE

Red Hat Security Advisory: systemd security update

Published May 6, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 37

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-boot-unsigned 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-boot-unsigned-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-container-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-debugsource 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-devel 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-journal-remote 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-journal-remote-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-libs-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-oomd-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-pam-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-resolved-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-standalone-sysusers-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-standalone-tmpfiles-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-udev-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::appstream systemd-ukify 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos rhel-net-naming-sysattrs 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-boot-unsigned-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-container 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-container-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-debugsource 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-journal-remote-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-libs 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-libs-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-oomd 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-oomd-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-pam 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-pam-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-resolved 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-resolved-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-rpm-macros 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-standalone-sysusers-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-standalone-tmpfiles-debuginfo 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-udev 0:252-55.el9_7.9
Red Hat · RHEL 9 enterprise_linux:9::baseos systemd-udev-debuginfo 0:252-55.el9_7.9

Vulnerabilities 1

  • Medium 5.5
    CVE-2026-29111

    systemd: Local unprivileged user can trigger an assert

    systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled con…

    systemd systemd systemd systemd Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2450505
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13677.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-29111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-29111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-29111
  • article
    https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a
  • article
    https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6
  • article
    https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412
  • article
    https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd
  • article
    https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f
  • article
    https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f
  • article
    https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69
  • article
    https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6
  • article
    https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c
  • article
    https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8
  • article
    https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764