CVE-2026-29111

MEDIUM 5.5

systemd: Local unprivileged user can trigger an assert

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

1th

systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.

CWE	CWE-269
Vendor	systemd
Product	systemd
Published	Mar 23, 2026
Last Updated	Mar 25, 2026

Stay Ahead of the Next One

Get instant alerts for systemd systemd

Be the first to know when new medium vulnerabilities affecting systemd systemd are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

systemd / systemd

>= 239, < 257.11 >= 258, < 258.5 >= 259, < 259.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗