Summary
Qualys discovered that systemd incorrectly handled metadata when processing
application crashes. An attacker could possibly use this issue to expose
sensitive information.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | systemd | 249.11-0ubuntu3.16 |
| Ubuntu · 24.04 LTS 24.04:LTS | systemd | 255.4-1ubuntu8.8 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | systemd | 245.4-4ubuntu3.24+esm1 |
Vulnerabilities 1
-
Medium 4.7
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc…
References
-
report
https://ubuntu.com/security/CVE-2025-4598