DEBIAN-CVE-2026-15059 - systemd/systemd
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.
CWE-59 / CVSS 5.5 (MEDIUM)
Evidence
- fix verified present in fork base
History
- 2026-10-28: merged - remediated upstream, in fork base