Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
systemd can run out of memory via bad input
published 3 months ago
Summary
The systemd packages for CentOS (including the container, development, remote journal, and library versions) can be tricked into using excessive memory when they receive a specially crafted control group name. This could cause the service to become unstable or stop working. Install the updated systemd packages from your vendor to apply the fix.
What to do
- Update centos systemd to version 239-45.el8_4.3.tuxcare.els6.
- Update centos systemd-container to version 239-45.el8_4.3.tuxcare.els6.
- Update centos systemd-devel to version 239-45.el8_4.3.tuxcare.els6.
- Update centos systemd-journal-remote to version 239-45.el8_4.3.tuxcare.els6.
- Update centos systemd-libs to version 239-45.el8_4.3.tuxcare.els6.
- Update centos systemd-pam to version 239-45.el8_4.3.tuxcare.els6.
- Update centos systemd-tests to version 239-45.el8_4.3.tuxcare.els6.
- Update centos systemd-udev to version 239-45.el8_4.3.tuxcare.els6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:8.4 | centos | systemd |
< 239-45.el8_4.3.tuxcare.els6 Fix: upgrade to 239-45.el8_4.3.tuxcare.els6
|
| TuxCare:CentOS:8.4 | centos | systemd-container |
< 239-45.el8_4.3.tuxcare.els6 Fix: upgrade to 239-45.el8_4.3.tuxcare.els6
|
| TuxCare:CentOS:8.4 | centos | systemd-devel |
< 239-45.el8_4.3.tuxcare.els6 Fix: upgrade to 239-45.el8_4.3.tuxcare.els6
|
| TuxCare:CentOS:8.4 | centos | systemd-journal-remote |
< 239-45.el8_4.3.tuxcare.els6 Fix: upgrade to 239-45.el8_4.3.tuxcare.els6
|
| TuxCare:CentOS:8.4 | centos | systemd-libs |
< 239-45.el8_4.3.tuxcare.els6 Fix: upgrade to 239-45.el8_4.3.tuxcare.els6
|
| TuxCare:CentOS:8.4 | centos | systemd-pam |
< 239-45.el8_4.3.tuxcare.els6 Fix: upgrade to 239-45.el8_4.3.tuxcare.els6
|
| TuxCare:CentOS:8.4 | centos | systemd-tests |
< 239-45.el8_4.3.tuxcare.els6 Fix: upgrade to 239-45.el8_4.3.tuxcare.els6
|
| TuxCare:CentOS:8.4 | centos | systemd-udev |
< 239-45.el8_4.3.tuxcare.els6 Fix: upgrade to 239-45.el8_4.3.tuxcare.els6
|
Original advisory text
systemd: Fix of CVE-2026-29111
- CVE-2026-29111: validate the control group path in the
GetUnitByControlGroup D-Bus method, rejecting non-absolute or
non-normalized input to prevent stack exhaustion from an oversized,
attacker-controlled string
- Skip the test-fs-util symlink touch_file check when the build kernel
does not support chmod() on a symlink (-EOPNOTSUPP), so the build's
test phase no longer aborts during the package build
GetUnitByControlGroup D-Bus method, rejecting non-absolute or
non-normalized input to prevent stack exhaustion from an oversized,
attacker-controlled string
- Skip the test-fs-util symlink touch_file check when the build kernel
does not support chmod() on a symlink (-EOPNOTSUPP), so the build's
test phase no longer aborts during the package build
References
- https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1784813597.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-29111 Vendor Advisory
Timeline
Published23 Jul 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1784813597 · OSV
Track software like this
Free during beta