CVE Catalog
CVE-2022-4415
MediumSummary
A vulnerability in systemd causes systemd-coredump to ignore the kernel's fs.suid_dumpable setting, potentially leading to a local information leak.
Risk Assessment
A local attacker could access core dumps of privileged processes, potentially exposing sensitive data such as passwords or cryptographic keys.
Recommendation
It is recommended to update systemd to a patched version and verify the fs.suid_dumpable configuration to ensure alignment with security policies.
Original NVD description (English source)
A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.