Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian: DSA-5931-1 moderate: systemd race condition risk

debian
Calendar Grey May 29, 2025
Debian Logo
Investigate a significant vulnerability within systemd that presents a risk of unauthorized data exposure via a race condition, potentially enabling local attackers to exploit this flaw.
The Qualys Threat Research Unit (TRU) discovered that systemd-coredump is prone to a kill-and-replace race condition which may allow a local attacker to gain sensitive information ...
Topics%20covered

Topics Covered

security advisory information leak Debian local attack systemd process exploitation

Summary

Details can be found in the Qualys advisory at
https://https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt

For the stable distribution (bookworm), this problem has been fixed in
version 252.38-1~deb12u1.

We recommend that you upgrade your systemd packages.

For the detailed security status of systemd please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/systemd

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: systemd
CVE ID: CVE-2025-4598

Topics%20covered

Topics Covered

security advisory information leak Debian local attack systemd process exploitation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here