SUSE-SU-2026:0990-1: systemd&distro=SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:0990-1 is a vulnerability in systemd&distro=SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 24-03-2026
   PublishedVulnerability first disclosed.
2. 25-03-2026
   Last modifiedVulnerability information updated.

Description

Security update for systemd This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). - udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Changelog: - 566517ffcb machined: reject invalid class types when registering machines - abbdd89d78 udev: fix review mixup - c9cedd26be udev-builtin-net-id: print cescaped bad attributes - c0f4ec3db9 udev: ensure tag parsing stays within bounds - 38afcb73cc udev: ensure there is space for trailing NUL before calling sprintf - a64247de62 udev: check for invalid chars in various fields received from the kernel - ecce32966e core/cgroup: avoid one unnecessary strjoina() - 6abd2b5bd2 core: validate input cgroup path more prudently - 2d7d93d6c1 alloc-util: add strdupa_safe() + strndupa_safe() and use it everywhere

No weakness data has been published for this record.