Skip to content
OpenAdvisories
Medium USN-8119-1 1 CVE

systemd vulnerabilities

Published Mar 23, 2026 · Updated Jun 5, 2026

Ecosystem: Ubuntu

Summary

It was discovered that systemd incorrectly handled certain cgroup paths.
A local attacker could possibly use this issue to cause systemd to crash,
resulting in a denial of service. (CVE-2026-29111)

It was discovered that the systemd udev component incorrectly handled
certain fields received from the kernel. An attacker with a malicious
device could possibly use this issue to execute arbitrary code as an
administrator (root).

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS systemd 249.11-0ubuntu3.19
Ubuntu · 24.04 LTS 24.04:LTS systemd 255.4-1ubuntu8.14
Ubuntu · 25.10 systemd 257.9-0ubuntu2.3

Vulnerabilities 1

  • Medium 5.5
    CVE-2026-29111

    systemd: Local unprivileged user can trigger an assert

    systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled con…

    systemd systemd systemd systemd Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-29111