CVE-2026-15059

Опубликовано: 10 авг. 2026

Источник: debian

EPSS Низкий

Описание

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

Пакет	Статус	Версия исправления	Релиз	Тип
systemd	fixed	261~rc3-1		package
systemd	no-dsa		trixie	package

https://github.com/systemd/systemd/security/advisories/GHSA-652q-wxr6-h5j6
Fixed by: https://github.com/systemd/systemd/commit/cde88c4ea364e816619f385a870d074ebc12fe0f (v261-rc3)
Fixed by: https://github.com/systemd/systemd/commit/a8feb2f23565d39df5c90a753c851c1934a53117 (v258.9)

EPSS

Процентиль: 2%

0.00119

Низкий

CVE-2026-15059

CVSS3: 5.5

ubuntu

13 дней назад

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

CVE-2026-15059

CVSS3: 5.5

nvd

13 дней назад

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

CVE-2026-15059

msrc

9 дней назад

systemd-oomd: unprivileged users can terminate arbitrary processes

EPSS

Процентиль: 2%

0.00119

Низкий