Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

SUSE 12 SP5 Systemd Important Access Control Vulnerability 2026-0991-1

suse
Calendar Grey March 24, 2026
Dist Suse Esm H88
An important update for SUSE systemd resolves a privilege escalation risk, enhancing system security.
An update that solves one vulnerability and has one security fix can now be installed.

Summary

## This update for systemd fixes the following issue: * CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). * udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Changelog: cbf8ee66ee machined: reject invalid class types when registering machines 1a55ad48da udev: fix review mixup 1eba76668c udev-builtin-net-id: print cescaped bad attributes cbd4b55380 udev: ensure tag parsing stays within bounds 5973d3b1cc udev: ensure there is space for trailing NUL before calling sprintf f038eb6c8b udev: check for invalid chars in various fields received from the kernel

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation access control important systemd

References

* bsc#1259650

* bsc#1259697

Cross-

* CVE-2026-4105

CVSS scores:

* CVE-2026-4105 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-4105 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-4105 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected Products:

* SUSE Linux Enterprise High Performance Computing 12 SP5

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security

* SUSE Linux Enterprise Server for SAP Applications 12 SP5

An update that solves one vulnerability and has one security fix can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2026-4105.html

* https://bugzilla.suse.com/show_bug.cgi?id=1259650

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:0991-1
Release Date: 2026-03-24T07:23:04Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation access control important systemd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.