A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade systemd | Apr 16, 2026 | Apr 16, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 13, 2026 |
| Suse | — | Upgrade libsystemd0-32bitUpgrade systemd-networkdUpgrade systemd-32bitUpgrade libudev1Upgrade systemd-sysvcompatUpgrade libudev-develUpgrade libudev1-32bitUpgrade systemd-sysvinitUpgrade systemd-homedUpgrade systemd-bash-completionUpgrade systemd-journal-remoteUpgrade systemd-langUpgrade libsystemd0Upgrade systemd-portableUpgrade systemd-containerUpgrade systemd-coredumpUpgrade systemd-networkUpgrade systemd-docUpgrade systemd-resolvedUpgrade systemd-experimentalUpgrade systemd-testsuiteUpgrade systemd-bootUpgrade udevUpgrade systemdUpgrade systemd-devel | Mar 27, 2026 | Mar 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub