The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 13, 2018 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Feb 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-develUpgrade systemd-libsUpgrade systemdUpgrade systemd-pythonUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1 | Sep 12, 2019 | Feb 13, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libgudev1Upgrade systemd-develUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemdUpgrade systemd-python | Sep 25, 2019 | Feb 13, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-udev-compatUpgrade systemd-develUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1 | Aug 16, 2019 | Feb 13, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 13, 2018 |
| Suse | — | Upgrade nss-systemdUpgrade nss-myhostnameUpgrade libudev-develUpgrade libsystemd0-32bitUpgrade systemd-miniUpgrade systemd-coredumpUpgrade libudev1Upgrade udevUpgrade systemd-loggerUpgrade systemd-32bitUpgrade libsystemd0-miniUpgrade libudev1-32bitUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade nss-mymachines-32bitUpgrade systemd-sysvinitUpgrade libsystemd0Upgrade libudev-mini1Upgrade systemd-bash-completionUpgrade systemd-langUpgrade systemdUpgrade systemd-containerUpgrade systemd-docUpgrade nss-myhostname-32bitUpgrade libudev-mini-develUpgrade systemd-mini-sysvinitUpgrade udev-miniUpgrade libudev-devel-32bitUpgrade nss-mymachinesUpgrade systemd-mini-container-miniUpgrade systemd-mini-bash-completionUpgrade systemd-mini-develUpgrade systemd-mini-coredump-mini | Jan 31, 2019 | Feb 13, 2018 |
| Ubuntu | — | Upgrade systemd | Nov 15, 2018 | Feb 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub