Stay Secure with the Latest Linux Advisories

security advisoryinformation leakDebian

Debian: DSA-5931-1 moderate: systemd race condition risk

The Qualys Threat Research Unit (TRU) discovered that systemd-coredump is prone to a kill-and-replace race condition which may allow a local attacker to gain sensitive information from crashed SUID processes. Additionally systemd-coredump does not specify %d (the kernel's per- . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5931-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso May 29, 2025 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : systemd CVE ID : CVE-2025-4598 Debian Bug : 1106785 The Qualys Threat Research Unit (TRU) discovered that systemd-coredump is prone to a kill-and-replace race condition which may allow a local attacker to gain sensitive information from crashed SUID processes. Additionally systemd-coredump does not specify %d (the kernel's per- process "dumpable" flag) in /proc/sys/kernel/core_pattern allowing a local attacker to crash root daemons that fork() and setuid() to the attacker's uid and consequently gain read access to the resulting core dumps and therefore to sensitive information from memory of the root daemons. Details can be found in the Qualys advisory at https://https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt For the stable distribution (bookworm), this problem has been fixed in version 252.38-1~deb12u1. We recommend that you upgrade your systemd packages. For the detailed security status of systemd please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/systemd Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Investigate a significant vulnerability within systemd thatpresents a risk of unauthorized data exposure via a race condition, potentially enabling local attackers to exploit this flaw.. systemd security advisory, Debian updates, local attacker exploits. . LinuxSecurity.com Team

May 29, 2025 Debian