CVE-2026-15059

MediumCVSS 5.5

Published: 10/08/2026(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

An attacker can cause critical system processes to stop, leading to service outages and potential loss of system availability.

Apply the patch provided by the systemd-oomd vendor that adds proper path validation in the IPC API.

Original NVD description (English source)

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.