{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T05:29:40.633","vulnerabilities":[{"cve":{"id":"CVE-2026-29111","sourceIdentifier":"security-advisories@github.com","published":"2026-03-23T22:16:26.267","lastModified":"2026-06-17T10:29:37.060","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available."},{"lang":"es","value":"systemd, un gestor de sistemas y servicios, (como PID 1) activa una aserción y congela la ejecución cuando se realiza una llamada a la API IPC no privilegiada con datos espurios. En la versión v249 y anteriores, el efecto no es una aserción, sino una sobrescritura de pila, con contenido controlado por el atacante. A partir de la versión v250 y posteriores, esto no es posible ya que la comprobación de seguridad provoca una aserción en su lugar. Esta llamada IPC se añadió en v239, por lo que las versiones anteriores a esa no están afectadas. Las versiones 260-rc1, 259.2, 258.5 y 257.11 contienen parches. No se conocen soluciones alternativas disponibles."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"systemd","product":"systemd","versions":[{"version":">= 239, < 257.11","status":"affected"},{"version":">= 258, < 258.5","status":"affected"},{"version":">= 259, < 259.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-25T19:12:36.640498Z","id":"CVE-2026-29111","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*","versionStartIncluding":"239","versionEndExcluding":"257.11","matchCriteriaId":"8B7440B3-21E0-4CE7-B414-B468DF589EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*","versionStartIncluding":"258","versionEndExcluding":"258.5","matchCriteriaId":"17A98BF3-E6DB-4C8F-8D17-858CB679884E"},{"vulnerable":true,"criteria":"cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*","versionStartIncluding":"259","versionEndExcluding":"259.2","matchCriteriaId":"FE1B8AFB-01F5-4B3F-BB53-DCAE57F2C2A2"}]}]}],"references":[{"url":"https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764","source":"security-advisories@github.com","tags":["Patch","Vendor Advisory"]}]}}]}