CVE-2026-29111

A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).

This vulnerability is evaluated as having Moderate impact because exploitation requires existing local system access with authenticated user privileges, precluding direct remote compromise. In default Red Hat Enterprise Linux environments, unprivileged users can interact with systemd via D-Bus, where sending crafted requests to the control group IPC handler triggers an unhandled assertion or memory corruption in PID 1. Consequently, an attacker already present on the machine can disrupt system availability or potentially escalate privileges without requiring administrative rights.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.