SUSE-SU-2026:0990-1

SUSE-SU-2026:0990-1 · Security update for systemd

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). - udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Changelog: - 566517ffcb machined: reject invalid class types when registering machines - abbdd89d78 udev: fix review mixup - c9cedd26be udev-builtin-net-id: print cescaped bad attributes - c0f4ec3db9 udev: ensure tag parsing stays within bounds - 38afcb73cc udev: ensure there is space for trailing NUL before calling sprintf - a64247de62 udev: check for invalid chars in various fields received from the kernel - ecce32966e core/cgroup: avoid one unnecessary strjoina() - 6abd2b5bd2 core: validate input cgroup path more prudently - 2d7d93d6c1 alloc-util: add strdupa_safe() + strndupa_safe() and use it everywhere

Fix available

Published

2026-03-24T07:22:51Z

Updated

2026-03-25T08:32:16.303875Z

Stack: system

Check your server →