The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade systemd-containerUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-debugsourceUpgrade systemd-tests-debuginfoUpgrade systemdUpgrade systemd-pamUpgrade systemd-libs-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-libsUpgrade systemd-pam-debuginfoUpgrade systemd-develUpgrade systemd-journal-remote | Apr 29, 2020 | Apr 26, 2019 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Apr 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-develUpgrade systemd-libsUpgrade systemd-containerUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-udev | Jun 27, 2019 | Apr 26, 2019 |
| Oracle_linux | — | Upgrade systemd-develUpgrade systemdUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-libs | Oct 5, 2022 | Apr 25, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 26, 2019 |
| Redhat_linux | — | Upgrade systemd-udevUpgrade systemd-pam-debuginfoUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-debuginfoUpgrade systemd-pamUpgrade systemd-debugsourceUpgrade systemd-develUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemdUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-containerUpgrade systemd-journal-remote-debuginfo | Apr 29, 2020 | Apr 26, 2019 |
| Suse | — | Upgrade systemd-docUpgrade libudev1-32bitUpgrade libsystemd0Upgrade systemd-bash-completionUpgrade systemd-containerUpgrade systemd-coredumpUpgrade libudev-develUpgrade systemd-sysvinitUpgrade systemd-langUpgrade systemd-32bitUpgrade systemdUpgrade systemd-journal-remoteUpgrade udevUpgrade systemd-develUpgrade libsystemd0-32bitUpgrade libudev1 | Feb 4, 2022 | Apr 26, 2019 |
| Ubuntu | — | Upgrade systemd | Feb 6, 2020 | Apr 26, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 26, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub