CVE-2026-15059systemd-oomd: unprivileged users can terminate arbitrary processes

Description

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://github.com/systemd/systemd/security/advisories/GHSA-652q-wxr6-h5j6