REDHAT-BUG-2155515: Medium severity systemd vulnerability
systemd-coredump sets the sysctl fs.suiddumpable by default to 2 via a sysctl.d drop-in configuration file. For the kernel's builtin coredump handling this setting means that core dumps for setuid (or otherwise privileged) processes will be written to disk but will only be accessible to the root user to avoid sensitive data leaking to unprivileged user accounts. See also man 5 proc for the full documentation of this sysctl.
https://github.com/systemd/systemd/commit/b7641425659243c09473cd8fb3aef2c0d4a3eb9c
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2155515?
The severity of REDHAT-BUG-2155515 is significant due to the potential exposure of sensitive core dump files from privileged processes.
How do I fix REDHAT-BUG-2155515?
To fix REDHAT-BUG-2155515, modify the sysctl configuration to set fs.suid_dumpable to a safer value, such as 0 or 1.
Which software is affected by REDHAT-BUG-2155515?
The affected software for REDHAT-BUG-2155515 is systemd, specifically versions that include systemd-coredump features.
What are the implications of REDHAT-BUG-2155515?
The implications of REDHAT-BUG-2155515 include the risk of unauthorized access to core dumps containing sensitive information from setuid processes.
Is REDHAT-BUG-2155515 a known issue?
Yes, REDHAT-BUG-2155515 is a known issue reported in Red Hat's bug tracking system.