SUSE-SU-2026:1061-1: systemd&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:1061-1 is a vulnerability in systemd&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 26-03-2026
   PublishedVulnerability first disclosed.
2. 27-03-2026
   Last modifiedVulnerability information updated.

Description

Security update for systemd This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). - udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Changelog: - 6a38d88a42 machined: reject invalid class types when registering machines - 8c9a592e5a udev: fix review mixup - b57007a917 udev-builtin-net-id: print cescaped bad attributes - ee23c7604b udev-builtin-net_id: do not assume the current interface name is ethX - 0f63e799e6 udev: ensure tag parsing stays within bounds - 046f52ec12 udev: ensure there is space for trailing NUL before calling sprintf - 5be21460ce udev: check for invalid chars in various fields received from the kernel - 9559607b16 core/cgroup: avoid one unnecessary strjoina() - fcae348ca4 core: validate input cgroup path more prudently - a3ca6b3031 alloc-util: add strdupa_safe() + strndupa_safe() and use it everywhere - 08125d6b06 units: add dep on systemd-logind.service by user@.service

No weakness data has been published for this record.