SUSE-SU-2026:1040-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20261040-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1040-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:1040-1
Upstream
CVE (2)
Related
CVE (2)
Published
2026-03-25T12:43:09Z
Modified
2026-03-27T17:28:51Z
Summary
Security update for systemd
Details

This update for systemd fixes the following issues:

  • CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).
  • CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).
  • udev: check for invalid chars in various fields received from the kernel (bsc#1259697).

Changelog:

  • a943e3ce2f machined: reject invalid class types when registering machines
  • 71593f77db udev: fix review mixup
  • 73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  • 0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  • 40905232e2 udev: ensure tag parsing stays within bounds
  • 7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  • d018ac1ea3 udev: check for invalid chars in various fields received from the kernel
  • aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  • cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  • 26a748f727 core: validate input cgroup path more prudently
  • 99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs
References

Affected packages

openSUSE:Leap 15.6
systemd

Package

Name
systemd
Purl
pkg:rpm/opensuse/systemd&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
254.27-150600.4.62.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "254.27-150600.4.62.1",
            "libsystemd0-32bit":  "254.27-150600.4.62.1",
            "libudev1":  "254.27-150600.4.62.1",
            "libudev1-32bit":  "254.27-150600.4.62.1",
            "systemd":  "254.27-150600.4.62.1",
            "systemd-32bit":  "254.27-150600.4.62.1",
            "systemd-boot":  "254.27-150600.4.62.1",
            "systemd-container":  "254.27-150600.4.62.1",
            "systemd-coredump":  "254.27-150600.4.62.1",
            "systemd-devel":  "254.27-150600.4.62.1",
            "systemd-doc":  "254.27-150600.4.62.1",
            "systemd-experimental":  "254.27-150600.4.62.1",
            "systemd-homed":  "254.27-150600.4.62.1",
            "systemd-journal-remote":  "254.27-150600.4.62.1",
            "systemd-lang":  "254.27-150600.4.62.1",
            "systemd-network":  "254.27-150600.4.62.1",
            "systemd-networkd":  "254.27-150600.4.62.1",
            "systemd-portable":  "254.27-150600.4.62.1",
            "systemd-resolved":  "254.27-150600.4.62.1",
            "systemd-sysvcompat":  "254.27-150600.4.62.1",
            "systemd-testsuite":  "254.27-150600.4.62.1",
            "udev":  "254.27-150600.4.62.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1040-1.json"
SUSE:Linux Enterprise Module for Basesystem 15 SP7
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
254.27-150600.4.62.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "254.27-150600.4.62.1",
            "libsystemd0-32bit":  "254.27-150600.4.62.1",
            "libudev1":  "254.27-150600.4.62.1",
            "libudev1-32bit":  "254.27-150600.4.62.1",
            "systemd":  "254.27-150600.4.62.1",
            "systemd-32bit":  "254.27-150600.4.62.1",
            "systemd-container":  "254.27-150600.4.62.1",
            "systemd-coredump":  "254.27-150600.4.62.1",
            "systemd-devel":  "254.27-150600.4.62.1",
            "systemd-doc":  "254.27-150600.4.62.1",
            "systemd-journal-remote":  "254.27-150600.4.62.1",
            "systemd-lang":  "254.27-150600.4.62.1",
            "systemd-resolved":  "254.27-150600.4.62.1",
            "systemd-sysvcompat":  "254.27-150600.4.62.1",
            "udev":  "254.27-150600.4.62.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1040-1.json"
SUSE:Linux Enterprise Module for Package Hub 15 SP7
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
254.27-150600.4.62.1

Ecosystem specific 

{
    "binaries":  [
        {
            "systemd-network":  "254.27-150600.4.62.1",
            "systemd-networkd":  "254.27-150600.4.62.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1040-1.json"
SUSE:Linux Enterprise Server 15 SP6-LTSS
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
254.27-150600.4.62.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "254.27-150600.4.62.1",
            "libsystemd0-32bit":  "254.27-150600.4.62.1",
            "libudev1":  "254.27-150600.4.62.1",
            "libudev1-32bit":  "254.27-150600.4.62.1",
            "systemd":  "254.27-150600.4.62.1",
            "systemd-32bit":  "254.27-150600.4.62.1",
            "systemd-container":  "254.27-150600.4.62.1",
            "systemd-coredump":  "254.27-150600.4.62.1",
            "systemd-devel":  "254.27-150600.4.62.1",
            "systemd-doc":  "254.27-150600.4.62.1",
            "systemd-journal-remote":  "254.27-150600.4.62.1",
            "systemd-lang":  "254.27-150600.4.62.1",
            "systemd-resolved":  "254.27-150600.4.62.1",
            "systemd-sysvcompat":  "254.27-150600.4.62.1",
            "udev":  "254.27-150600.4.62.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1040-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
254.27-150600.4.62.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "254.27-150600.4.62.1",
            "libsystemd0-32bit":  "254.27-150600.4.62.1",
            "libudev1":  "254.27-150600.4.62.1",
            "libudev1-32bit":  "254.27-150600.4.62.1",
            "systemd":  "254.27-150600.4.62.1",
            "systemd-32bit":  "254.27-150600.4.62.1",
            "systemd-container":  "254.27-150600.4.62.1",
            "systemd-coredump":  "254.27-150600.4.62.1",
            "systemd-devel":  "254.27-150600.4.62.1",
            "systemd-doc":  "254.27-150600.4.62.1",
            "systemd-journal-remote":  "254.27-150600.4.62.1",
            "systemd-lang":  "254.27-150600.4.62.1",
            "systemd-resolved":  "254.27-150600.4.62.1",
            "systemd-sysvcompat":  "254.27-150600.4.62.1",
            "udev":  "254.27-150600.4.62.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1040-1.json"