VDB
RHSA-2026:49910
RHSA-2026:49910
PUBLISHED
CVSS 7.800000190734863 HIGH
A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | systemd-container-0:252-51.el9_6.6.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-libs-0:252-51.el9_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-journal-remote-debuginfo-0:252-51.el9_6.6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-journal-remote-debuginfo-0:252-51.el9_6.6.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-boot-unsigned-0:252-51.el9_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-pam-0:252-51.el9_6.6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-libs-0:252-51.el9_6.6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-udev-debuginfo-0:252-51.el9_6.6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-debuginfo-0:252-51.el9_6.6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-udev-debuginfo-0:252-51.el9_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-resolved-debuginfo-0:252-51.el9_6.6.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-libs-0:252-51.el9_6.6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-pam-0:252-51.el9_6.6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-ukify-0:252-51.el9_6.6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-debuginfo-0:252-51.el9_6.6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-resolved-debuginfo-0:252-51.el9_6.6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-oomd-debuginfo-0:252-51.el9_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-oomd-debuginfo-0:252-51.el9_6.6.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-debugsource-0:252-51.el9_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
| Red Hat | systemd-oomd-0:252-51.el9_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | 0:252-51.el9_6.6 |
…and 140 more
Timeline
- Aug 4, 2026 CVE Published
- Aug 23, 2026 CVE Updated
- Aug 23, 2026 Distribution Patch
- Aug 23, 2026 Distribution Patch
- Aug 23, 2026 Security Advisory
- Aug 23, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:49910 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2450505 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49910.json advisory
- https://access.redhat.com/security/cve/CVE-2026-29111 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-29111 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-29111 advisory
- https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a advisory
- https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 advisory
- https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 advisory
- https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd advisory
- https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f advisory
- https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f advisory
- https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 advisory
- https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 advisory
- https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c advisory
- https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 advisory
- https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 advisory