CVE-2026-4105: Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method
A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/systemdto a version that resolves this vulnerability.Fixed in 252.39-1~deb12u2 - Upgrade
Upgrade
debian/systemdto a version that resolves this vulnerability.Fixed in 257.13-1~deb13u1 - Upgrade
Upgrade
debian/systemdto a version that resolves this vulnerability.Fixed in 260~rc3-1 - Upgrade
Upgrade
debian/systemdto a version that resolves this vulnerability.Fixed in 252.39-1~deb12u2Fixed in 257.13-1~deb13u1Fixed in 262-1Fixed in 262.2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4105?
CVE-2026-4105 has been categorized as a high severity privilege escalation vulnerability.
How do I fix CVE-2026-4105?
To fix CVE-2026-4105, update to the latest patched version of systemd as released by your distribution.
What types of systems are affected by CVE-2026-4105?
CVE-2026-4105 affects various systems running the vulnerable versions of systemd services.
What impact does CVE-2026-4105 have?
The impact of CVE-2026-4105 could allow an attacker to escalate privileges and gain unauthorized access to system resources.
Is there a workaround for CVE-2026-4105?
Currently, the recommended action for CVE-2026-4105 is to apply the security update as there are no official workarounds.