The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 13, 2016 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Oct 13, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-pythonUpgrade systemd-libsUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-devel | Apr 16, 2020 | Oct 13, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-develUpgrade systemd-libsUpgrade systemdUpgrade systemd-pythonUpgrade systemd-sysv | Feb 15, 2019 | Oct 13, 2016 |
| Oracle_linux | — | Upgrade systemd-develUpgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemdUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-pythonUpgrade systemd-libs | Nov 9, 2016 | Sep 28, 2016 |
| Redhat_linux | — | Upgrade systemd-pythonUpgrade systemd-develUpgrade libgudev1Upgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-journal-gatewayUpgrade systemd-resolvedUpgrade libgudev1-develUpgrade systemdUpgrade systemd-sysvUpgrade systemd-networkd | Nov 7, 2016 | Oct 13, 2016 |
| Suse | — | Upgrade systemd-develUpgrade libudev1-32bitUpgrade libudev1Upgrade udevUpgrade systemd-bash-completionUpgrade systemdUpgrade libsystemd0-32bitUpgrade systemd-sysvinitUpgrade libsystemd0Upgrade systemd-32bitUpgrade libudev-devel | Dec 9, 2016 | Oct 13, 2016 |
| Ubuntu | — | Upgrade systemd | Nov 19, 2024 | Oct 13, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub