systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 13, 2018 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Feb 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-pythonUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-devel | Sep 12, 2019 | Feb 13, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemdUpgrade systemd-develUpgrade libgudev1Upgrade systemd-libs | Sep 25, 2019 | Feb 13, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libgudev1-develUpgrade libgudev1Upgrade systemd-sysvUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-devel | Aug 16, 2019 | Feb 13, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 13, 2018 |
| Suse | — | Upgrade nss-myhostname-32bitUpgrade systemd-mini-bash-completionUpgrade libudev-mini-develUpgrade systemd-containerUpgrade systemd-mini-coredump-miniUpgrade nss-mymachinesUpgrade libudev-devel-32bitUpgrade systemd-langUpgrade systemd-mini-develUpgrade systemd-mini-container-miniUpgrade systemd-mini-sysvinitUpgrade udev-miniUpgrade systemdUpgrade systemd-docUpgrade systemd-journal-remoteUpgrade libsystemd0Upgrade systemd-coredumpUpgrade libudev1-32bitUpgrade libudev-mini1Upgrade systemd-bash-completionUpgrade nss-mymachines-32bitUpgrade libsystemd0-32bitUpgrade libudev-develUpgrade nss-myhostnameUpgrade nss-systemdUpgrade systemd-sysvinitUpgrade systemd-loggerUpgrade libudev1Upgrade libsystemd0-miniUpgrade udevUpgrade systemd-miniUpgrade systemd-32bitUpgrade systemd-devel | Jan 31, 2019 | Feb 13, 2018 |
| Ubuntu | — | Upgrade systemd | Nov 15, 2018 | Feb 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub