A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-libsUpgrade systemdUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-journal-gateway | Apr 27, 2020 | Mar 31, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 31, 2020 |
| Centos_linux | — | Upgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-pam-debuginfoUpgrade systemd-containerUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemdUpgrade systemd-udevUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-testsUpgrade systemd-container-debuginfo | Feb 25, 2020 | Feb 24, 2020 |
| Debian | — | Upgrade systemd | Jul 4, 2022 | Mar 31, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 16, 2020 | Mar 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-containerUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-libsUpgrade systemd-devel | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade systemd-develUpgrade systemd-pamUpgrade systemdUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-containerUpgrade systemd-testsUpgrade systemd-libs | Oct 5, 2022 | Feb 5, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 31, 2020 |
| Redhat_linux | — | Upgrade systemd-journal-remoteUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-pam-debuginfoUpgrade systemd-debugsourceUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-container-debuginfoUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-udev-debuginfo | Feb 25, 2020 | Feb 24, 2020 |
| Suse | — | Upgrade systemd-mini-container-miniUpgrade systemd-docUpgrade libsystemd0Upgrade systemd-mini-develUpgrade systemdUpgrade udev-miniUpgrade systemd-containerUpgrade systemd-miniUpgrade systemd-bash-completionUpgrade systemd-sysvinitUpgrade systemd-mini-coredump-miniUpgrade systemd-coredumpUpgrade libudev1-32bitUpgrade systemd-32bitUpgrade libudev-develUpgrade systemd-langUpgrade libudev-mini-develUpgrade libsystemd0-32bitUpgrade nss-myhostnameUpgrade libudev-mini1Upgrade systemd-mini-bash-completionUpgrade systemd-journal-remoteUpgrade systemd-loggerUpgrade nss-myhostname-32bitUpgrade libudev1Upgrade nss-systemdUpgrade libsystemd0-miniUpgrade systemd-develUpgrade nss-mymachines-32bitUpgrade nss-mymachinesUpgrade systemd-mini-sysvinitUpgrade libudev-devel-32bitUpgrade udev | Feb 6, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade systemd | Feb 6, 2020 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub