CVE-2026-29111 Details
Description
systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.
A vulnerability in systemd's handling of control group paths can cause the systemd process (PID 1) to freeze and assert when an unprivileged inter-process communication (IPC) API call is made with invalid data. This issue affects systemd versions 239 through 249, where it leads to stack overwriting with attacker-controlled content. In versions 250 and newer, the vulnerability is mitigated by a safety check that triggers an assert instead of allowing the stack to be overwritten. The problematic IPC call was introduced in version 239, so versions prior to that are not affected. The vulnerability can be exploited by sending a crafted control group path that bypasses normal validation, causing systemd to crash or behave unexpectedly.
Users can upgrade to systemd versions 260, 259.2, 258.5, or 257.11, all of which include patches to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 25, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
| CWE-269 | Improper Privilege Management | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| systemd project systemd | >= 239, < 257.11 >= 258, < 258.5 >= 259, < 259.2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 15, 2026 | Initial Analysis | [email protected] |
| Mar 23, 2026 | New CVE Received | [email protected] |