Description
stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.1 | stalld | 1.19.8-slfo.1.1_1.1 | SUSE-SU-2025:20468-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | stalld | 1.19.8-1.1 | openSUSE-SU-2025:14886-1 |
Advisories 2
- SUSE-SU-2025:20468-1 Security update for stalld SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:14886-1 stalld-1.19.8-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026