AZL-95646

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95646.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-95646
Upstream
  • CVE-2026-15059
Published
2026-08-10T14:17:20Z
Modified
2026-08-30T05:26:50Z
Summary
CVE-2026-15059 affecting package systemd-bootstrap 250.3-19
Details

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

References

Affected packages

Azure Linux:3 / systemd-bootstrap

Package

Name
systemd-bootstrap
Purl
pkg:rpm/azure-linux/systemd-bootstrap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
250.3-19

Database specific

source 
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95646.json"