It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade systemd-container-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-udevUpgrade systemd-testsUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-libs-debuginfoUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-udev-debuginfoUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-pam-debuginfoUpgrade systemd-container | Apr 29, 2020 | Apr 26, 2019 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Apr 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-udev-compatUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-libs | Jun 27, 2019 | Apr 26, 2019 |
| Oracle_linux | — | Upgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-develUpgrade systemdUpgrade systemd-containerUpgrade systemd-testsUpgrade systemd-libs | Oct 5, 2022 | Apr 25, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 26, 2019 |
| Redhat_linux | — | Upgrade systemd-pam-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemdUpgrade systemd-develUpgrade systemd-tests-debuginfoUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-testsUpgrade systemd-libs-debuginfoUpgrade systemd-pamUpgrade systemd-debugsource | Apr 29, 2020 | Apr 26, 2019 |
| Suse | — | Upgrade libsystemd0-32bitUpgrade systemdUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-32bitUpgrade libudev1Upgrade udevUpgrade systemd-coredumpUpgrade systemd-langUpgrade systemd-docUpgrade libsystemd0Upgrade libudev1-32bitUpgrade systemd-bash-completionUpgrade systemd-sysvinitUpgrade libudev-develUpgrade systemd-container | Feb 4, 2022 | Apr 26, 2019 |
| Ubuntu | — | Upgrade systemd | Feb 6, 2020 | Apr 26, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 26, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub