Description
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | systemd | Fixed in v251-rc1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | systemd | 250.2-1 | — |
| Debian 13 | systemd | 250.2-1 | — |
| Debian 12 | systemd | 250.2-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | systemd | 245.4-4ubuntu3.15 | USN-5226-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | systemd | No fix yet | — |
| Ubuntu Pro 16.04 LTS | systemd | No fix yet | — |
| Ubuntu Pro 14.04 LTS | systemd | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP3 | systemd | 246.16-7.33.1 | SUSE-SU-2022:0539-1, SUSE-SU-2022:0043-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 5.1 | systemd | 246.16-7.33.1 | SUSE-SU-2022:0539-1, SUSE-SU-2022:0043-1 |
| SUSE Package Hub 15 SP3 | htmldoc | 1.9.12-bp153.2.6.1 | openSUSE-SU-2022:0043-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | systemd | 249.7-3.1 | openSUSE-SU-2024:11731-1 |
| openSUSE Leap 15.3 | htmldoc | 1.9.12-bp153.2.6.1 | openSUSE-SU-2022:0043-1 |
| openSUSE Leap 15.3 | systemd | 246.16-7.33.1 | openSUSE-SU-2022:0539-1, openSUSE-SU-2022:0043-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | systemd +13 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | systemd | 250.3-21 | — |
Advisories 10
- SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
- USN-5226-1 systemd vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- openSUSE-SU-2024:11731-1 libsystemd0-249.7-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:0539-1 Security update for systemd SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0539-1 Security update for systemd SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0043-1 Security update for systemd SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:0043-1 Security update for systemd SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2022-2277 systemd: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 2, 2025
- ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025
- ALAS2023-2023-025 Moderate: systemd security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 22, 2023