Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE Linux Micro 6.0 systemd Important Access Control Flaw 2026-20823-1

suse
Calendar Grey March 25, 2026
Dist Suse Esm H88
SUSE security update for systemd fixes critical issues and addresses vulnerabilities. Reboot recommended after installation.
An update that solves two vulnerabilities and has four fixes can now be installed.

Summary

### This update for systemd fixes the following issues: Security issues: * CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). * CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). * udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Non security issues: * Name libsystemd-{shared,core} based on the major version of systemd and the package release number (bsc#1228081, bsc#1256427) * detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293) Changelog: * a943e3ce2f machined: reject invalid class types when registering machines * 71593f77db udev: fix review mixup * 73a89810b4 udev-builtin-net-id: print cescaped bad attributes

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation access control important systemd

References

* bsc#1228081

* bsc#1254293

* bsc#1256427

* bsc#1259418

* bsc#1259650

* bsc#1259697

Cross-

* CVE-2026-29111

* CVE-2026-4105

CVSS scores:

* CVE-2026-29111 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-29111 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-29111 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-4105 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-4105 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-4105 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected Products:

* SUSE Linux Micro 6.0

* SUSE Linux Micro Extras 6.0

An update that solves two vulnerabilities and has four fixes can now be

installed.

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:20823-1
Release Date: 2026-03-24T09:27:18Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation access control important systemd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here