systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-pamUpgrade systemd-containerUpgrade systemd-ukifyUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemdUpgrade systemd-oomdUpgrade rhel-net-naming-sysattrsUpgrade systemd-develUpgrade systemd-rpm-macrosUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-boot-unsigned | May 6, 2026 | May 5, 2026 |
| Debian | — | Upgrade systemd | Apr 16, 2026 | Apr 16, 2026 |
| Oracle_linux | — | Upgrade systemd-libsUpgrade systemd-rpm-macrosUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-ukifyUpgrade rhel-net-naming-sysattrsUpgrade systemd-boot-unsignedUpgrade systemd-oomdUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-resolvedUpgrade systemd | May 6, 2026 | Mar 23, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 27, 2026 | Mar 23, 2026 |
| Redhat_linux | — | Upgrade systemd-boot-unsigned-debuginfoUpgrade systemd-udevUpgrade systemd-debuginfoUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-oomd-debuginfoUpgrade rhel-net-naming-sysattrsUpgrade systemd-rpm-macrosUpgrade systemd-ukifyUpgrade systemdUpgrade systemd-boot-unsignedUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-resolvedUpgrade systemd-pam-debuginfoNo solution existsUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-libs-debuginfoUpgrade systemd-oomdUpgrade systemd-debugsourceUpgrade systemd-tests-debuginfoUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-container-debuginfo | May 7, 2026 | Mar 23, 2026 |
| Rocky_linux | — | Upgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemd-boot-unsignedUpgrade systemd-libs-debuginfoUpgrade systemd-containerUpgrade systemd-pam-debuginfoUpgrade systemd-debugsourceUpgrade systemd-resolvedUpgrade systemd-oomdUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-develUpgrade systemd-resolved-debuginfoUpgrade systemdUpgrade systemd-boot-unsigned-debuginfoUpgrade systemd-debuginfo | May 25, 2026 | May 21, 2026 |
| Ubuntu | — | Upgrade udevUpgrade systemd (Ubuntu Pro)Upgrade libsystemd0Upgrade udev (Ubuntu Pro)Upgrade libudev1Upgrade systemdUpgrade libsystemd0 (Ubuntu Pro)Upgrade libudev1 (Ubuntu Pro) | Mar 27, 2026 | Mar 23, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 23, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub