systemd

A new privilege‑escalation vulnerability in systemd’s machine-management component — tracked as CVE‑2026‑4105 — has been disclosed and patched, and it demands immediate attention from desktop Linux users and system administrators who run optional systemd packages. The bug stems from improper...

The systemd component that collects and stores core dumps — systemd‑coredump — was found in January 2023 to ignore the kernel’s fs.suid_dumpable setting, allowing core files for setuid/setgid (privileged) processes to be produced and, under some configurations, read by non‑privileged users. That...

The short answer is: No — Azure Linux is the only Microsoft product Microsoft has publicly attested today to include the upstream systemd-coredump component implicated by CVE‑2025‑4598, but that attestation is product‑scoped, not an exclusivity guarantee. Any Microsoft artifact that ships or...

Lennart Poettering — the developer who rewrote how modern Linux systems come up and manage services — has quietly left Microsoft and co-founded a new Berlin-based startup, Amutable, with Chris Kühl and Christian Brauner, launching an explicit mission to bring determinism and cryptographically...