CVE-2026-15059
Received Received - Intake

systemd-oomd Arbitrary Process Termination via IPC API

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: systemd

Description
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-31
AI Q&A
2026-08-10
EPSS Evaluated
2026-08-29
NVD
CVE-2026-15059
EUVD
EUVD-2026-55625

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
systemd systemd-oomd From 250 (inc)
systemd systemd-oomd 258.9
systemd systemd-oomd 259.7
systemd systemd-oomd 260.3
systemd systemd-oomd 261

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows local unprivileged users to terminate arbitrary local processes via a systemd-oomd IPC API due to missing path traversal validation. This means an attacker with local access but no special privileges could manipulate the system to kill important processes.

Detection Guidance

This vulnerability allows local users to terminate arbitrary processes via systemd-oomd IPC API due to missing path traversal validation. Detection requires checking for unprivileged process termination capabilities in systemd-oomd. Review system logs for unusual process terminations or examine systemd-oomd configuration for exposed IPC endpoints. No specific commands are provided in the context.

Impact Analysis

An attacker could terminate critical system processes, leading to denial of service, data loss, or system instability. This could disrupt services, corrupt files, or crash the system entirely.

Compliance Impact

This vulnerability allows local users to terminate arbitrary processes without privileges, which could disrupt critical system services. This may impact compliance with standards like GDPR or HIPAA by potentially causing data processing interruptions or loss of service availability, though specific compliance impacts depend on system configuration and use case.

Mitigation Strategies

Update systemd-oomd to the latest patched version to address the missing path traversal validation in the IPC API.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-15059. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart