CVE-2026-29111
Alma Linux vulnerability analysis and mitigation

systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.


SourceNVD

Related Alma Linux vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-30892HIGH7.8
  • NixOSNixOS
  • crun
NoYesMar 26, 2026
CVE-2026-4371HIGH7.4
  • NixOSNixOS
  • rhel10::thunderbird-flatpak.src
NoYesMar 24, 2026
CVE-2026-33412HIGH7.3
  • VimVim
  • vim-debugsource
NoYesMar 24, 2026
CVE-2026-3889MEDIUM6.5
  • NixOSNixOS
  • MozillaThunderbird
NoYesMar 24, 2026
CVE-2026-0968LOW3.1
  • NixOSNixOS
  • libssh4
NoYesMar 26, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management