SUSE-SU-2026:20998-1: systemd&distro=SUSE Linux Micro Extras 6.2 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 07-04-2026Last modified 09-07-2026
Open JSON

Vulnerability summary

SUSE-SU-2026:20998-1 is a vulnerability in systemd&distro=SUSE Linux Micro Extras 6.2 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2
CVE-2026-29111CVE-2026-4105

Timeline

  1. 07-04-2026
    PublishedVulnerability first disclosed.
  2. 09-07-2026
    Last modifiedVulnerability information updated.

Description

Security update for systemd This update for systemd fixes the following issues: Update to systemd v257.13: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). - udev: local root execution via malicious hardware devices and unsanitized kernel output (bsc#1259697). Non security issues: - Avoid shipping (empty) directories and ghost files in /var (jsc#PED-14853). - Sign systemd-boot EFI binary on aarch64 (bsc#1258344) - terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326) Changelog: - 6941d92dc2 machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105) - 03bb697b8d udev: check for invalid chars in various fields received from the kernel (bsc#1259697) - 54588d2ded core: validate input cgroup path more prudently (bsc#1259418 CVE-2026-29111) - fb9d92682b terminal-util: stop doing 0/upper bound check in tty_is_vc() (bsc#1255326) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/3c53ef3ea20bd43ef587cbdfa7107aeb1ef55654...d349fc5cd4f9ee2b7884c2610647e92806d14b28

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse1 product
  • systemd&distro=SUSE Linux Micro Extras 6.2< 257.13-160000.1.1

1 vendor · 1 product

References

8 links