Description
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | systemd | 231-9 | — |
| Debian 13 | systemd | 231-9 | — |
| Debian 12 | systemd | 231-9 | — |
| Debian 7 | systemd | 44-11+deb7u5 | DLA-659-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | systemd | 229-4ubuntu11 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | systemd +9 | 219-19.el7 | RHBA-2015:2092 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7.1 EUS | systemd +7 | 208-20.ael7b_1.9 | RHSA-2017:0003 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | systemd | 210-114.1 | SUSE-SU-2016:2476-1 |
| SLES 12 | systemd | 210-70.58.1 | SUSE-SU-2016:2475-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | systemd | 210-114.1 | SUSE-SU-2016:2476-1 |
| SLES for SAP 12 | systemd | 210-70.58.1 | SUSE-SU-2016:2475-1 |
Advisories 5
- RHSA-2017:0003 Red Hat Security Advisory: systemd security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHBA-2015:2092 Red Hat Bug Fix Advisory: systemd bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DLA-659-1 systemd - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2016:2475-1 Security update for systemd SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2476-1 Security update for systemd SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [oss-security] 20160930 Re: CVE Request: systemd v209+: local denial-of-service attack mailing-list
- https://www.agwa.name/blog/post/how_to_crash_systemd_in_one_tweet
- https://github.com/systemd/systemd/issues/4234#issuecomment-250441246
- SUSE-SU-2016:2475 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1381911
- RHSA-2017:0003 vendor-advisory
- SUSE-SU-2016:2476 vendor-advisory
- 1037320 vdb-entry
- 93250 vdb-entry
- RHBA-2015:2092 vendor-advisory