Systemd Oomd
Monthly
systemd-oomd exposes an IPC API that local unprivileged users can abuse to terminate arbitrary processes on the host due to a missing path traversal validation (CWE-22). Any user holding a local shell account can craft IPC requests with traversal sequences to reference processes outside the intended cgroup scope, enabling targeted denial-of-service against critical system services. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
systemd-oomd exposes an IPC API that local unprivileged users can abuse to terminate arbitrary processes on the host due to a missing path traversal validation (CWE-22). Any user holding a local shell account can craft IPC requests with traversal sequences to reference processes outside the intended cgroup scope, enabling targeted denial-of-service against critical system services. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.