CVE-2026-15059

Summary

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

Affected Software

VendorProductVersion RangeStatus
systemdsystemd-oomd250 < 261, 260.3, 259.7, 258.9affected

Weaknesses

  • CWE-22: CWE-22
  • CWE-59: CWE-59

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

Additional References

References