Systemd Machined
Monthly
Process termination via systemd-machined v259 and later enables unprivileged users with active desktop graphical sessions to kill arbitrary system processes, including those running with elevated privileges, by exploiting an improper access control gap in the `register-machine` polkit action. The affected component - systemd-machined - is typically distributed as an optional, non-default package (such as `systemd-container`), and exploitation is strictly limited to desktop graphical login sessions, ruling out remote and SSH-based attack vectors entirely. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in CISA's Known Exploited Vulnerabilities catalog.
Process termination via systemd-machined v259 and later enables unprivileged users with active desktop graphical sessions to kill arbitrary system processes, including those running with elevated privileges, by exploiting an improper access control gap in the `register-machine` polkit action. The affected component - systemd-machined - is typically distributed as an optional, non-default package (such as `systemd-container`), and exploitation is strictly limited to desktop graphical login sessions, ruling out remote and SSH-based attack vectors entirely. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in CISA's Known Exploited Vulnerabilities catalog.