PT-2026-27218 · Systemd+3 · Systemd+3

Bluca + 1 · Published 2026-03-23 · Updated 2026-05-19 · CVE-2026-29111

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions systemd versions prior to 260-rc1 systemd versions prior to 259.2 systemd versions prior to 258.5 systemd versions prior to 257.11 systemd versions 239 through 249

Description systemd, a system and service manager, can freeze execution or experience stack overwriting when an unprivileged Inter-Process Communication (IPC) API call is made with invalid data. Versions prior to v239 are not affected. Versions v249 and earlier are susceptible to stack overwriting, allowing an attacker to control content. From version v250 onwards, the issue triggers an assert, preventing stack overwriting. The vulnerable IPC call was introduced in version v239.

Recommendations Update to systemd version 260-rc1 or later. Update to systemd version 259.2 or later. Update to systemd version 258.5 or later. Update to systemd version 257.11 or later.

Exploit

Fix

DoS

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

ALSA-2026:13651

ALSA-2026:13677

ALSA-2026:19068

ALSA-2026:19213

CVE-2026-29111

ECHO-BF64-F9B5-3E12

GHSA-GX6Q-6F99-M764

OESA-2026-1910

OESA-2026-1911

OESA-2026-1914

OESA-2026-1915

OESA-2026-2122

OESA-2026-2123

OPENSUSE-SU-2026:10624-1

OPENSUSE-SU-2026:20471-1

RHSA-2026:13651

RHSA-2026:13677

RHSA-2026:19068

RHSA-2026:19213

RHSA-2026:7299

SUSE-SU-2026:0990-1

SUSE-SU-2026:1040-1

SUSE-SU-2026:1061-1

SUSE-SU-2026:20822-1

SUSE-SU-2026:20826-1

SUSE-SU-2026:21003-1

SUSE-SU-2026:21144-1

USN-8119-1

USN-8119-2

Affected Products

Linuxmint

Rocky Linux

Ubuntu

Systemd

References · 83

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29111.json · Exploit
• https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c · Patch
• https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f · Patch
• https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 · Patch
• https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f · Patch
• https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd · Patch
• https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 · Patch
• https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 · Patch
• https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a · Patch
• https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 · Patch
• https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 · Vendor Advisory
• https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10624-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20471-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21144-1 · Vendor Advisory