Denial of Service Vulnerability in systemd by Systemd Developers
CVE-2026-29111
5.5MEDIUM
What is CVE-2026-29111?
A vulnerability in systemd allows for a denial of service when an unprivileged IPC API call is made with unexpected data, causing the system to freeze execution. In versions v249 and below, this can lead to stack overwriting with attacker-controlled content. From version v250 onward, a safety check results in an assert instead of execution freeze, mitigating the risk. Users should ensure they run patched versions (260-rc1, 259.2, 258.5, and 257.11) to avoid potential issues.
Affected Version(s)
systemd >= 239, < 257.11 < 239, 257.11
systemd >= 258, < 258.5 < 258, 258.5
systemd >= 259, < 259.2 < 259, 259.2