RHBA-2026:9743 - Bug Fix Advisory

Topic

An update for systemd is now available for Red Hat Enterprise Linux 8.

Description

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Bug Fix(es) and Enhancement(s):

• Local unprivileged user can trigger an assert in systemd via an IPC API call with bogus data [rhel-8.10.z] (JIRA:RHEL-152085)
• systemd leaks memory after updating to systemd-239-82.el8_10.15 (JIRA:RHEL-163867)
• systemd: nspawn escape-to-host via malformed optional config file (GHSA-9mj4-rrc3-gjcx) [rhel-8.10.z] (JIRA:RHEL-163868)
• udev: local root execution via malicious hardware devices and unsanitized kernel output (GHSA-vpfq-8p5f-jcqx) [rhel-8.10.z] (JIRA:RHEL-163874)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
• Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
• Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
• Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

• RHEL-163867 - systemd leaks memory after updating to systemd-239-82.el8_10.15

CVEs

(none)

References

(none)