systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 13, 2018 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Feb 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemdUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-devel | Sep 12, 2019 | Feb 13, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-develUpgrade libgudev1Upgrade systemd-libsUpgrade systemdUpgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd-sysv | Sep 25, 2019 | Feb 13, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-udev-compatUpgrade systemd-pythonUpgrade libgudev1Upgrade systemdUpgrade systemd-sysvUpgrade libgudev1-devel | Aug 16, 2019 | Feb 13, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 13, 2018 |
| Suse | — | Upgrade libsystemd0Upgrade libudev1Upgrade libsystemd0-miniUpgrade systemd-miniUpgrade nss-myhostnameUpgrade nss-systemdUpgrade libsystemd0-32bitUpgrade systemd-coredumpUpgrade libudev-mini1Upgrade libudev-develUpgrade systemd-bash-completionUpgrade systemd-32bitUpgrade systemd-loggerUpgrade systemd-sysvinitUpgrade libudev1-32bitUpgrade udevUpgrade systemd-develUpgrade nss-mymachines-32bitUpgrade systemd-journal-remoteUpgrade systemd-mini-bash-completionUpgrade libudev-mini-develUpgrade systemd-langUpgrade nss-mymachinesUpgrade nss-myhostname-32bitUpgrade libudev-devel-32bitUpgrade systemd-mini-coredump-miniUpgrade systemd-containerUpgrade systemd-mini-container-miniUpgrade systemd-mini-develUpgrade systemd-docUpgrade udev-miniUpgrade systemd-mini-sysvinitUpgrade systemd | Jan 31, 2019 | Feb 13, 2018 |
| Ubuntu | — | Upgrade systemd | Nov 15, 2018 | Feb 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub