Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

SUSE Linux Micro 6.0 systemd Major Privilege Escalation Risk 2026-20822-1

suse
Calendar Grey March 25, 2026
Dist Suse Esm H88
SUSE issues important update for systemd addressing critical security issues. Immediate installation recommended.
An update that solves two vulnerabilities and has four fixes can now be installed.

Summary

## This update for systemd fixes the following issues: Security issues: * CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). * CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). * udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Non security issues: * Name libsystemd-{shared,core} based on the major version of systemd and the package release number (bsc#1228081, bsc#1256427) * detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293) Changelog: * a943e3ce2f machined: reject invalid class types when registering machines * 71593f77db udev: fix review mixup * 73a89810b4 udev-builtin-net-id: print cescaped bad attributes

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation access control important systemd

References

* bsc#1228081

* bsc#1254293

* bsc#1256427

* bsc#1259418

* bsc#1259650

* bsc#1259697

Cross-

* CVE-2026-29111

* CVE-2026-4105

CVSS scores:

* CVE-2026-29111 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-29111 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-29111 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-4105 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-4105 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-4105 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected Products:

* SUSE Linux Micro 6.0

An update that solves two vulnerabilities and has four fixes can now be

installed.

##

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:20822-1
Release Date: 2026-03-24T09:31:07Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation access control important systemd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.