systemd

A new privilege‑escalation vulnerability in systemd’s machine-management component — tracked as CVE‑2026‑4105 — has been disclosed and patched, and it demands immediate attention from desktop Linux users and system administrators who run optional systemd packages. The bug stems from improper...

The systemd component that collects and stores core dumps — systemd‑coredump — was found in January 2023 to ignore the kernel’s fs.suid_dumpable setting, allowing core files for setuid/setgid (privileged) processes to be produced and, under some configurations, read by non‑privileged users. That...

The short answer is: No — Azure Linux is the only Microsoft product Microsoft has publicly attested today to include the upstream systemd-coredump component implicated by CVE‑2025‑4598, but that attestation is product‑scoped, not an exclusivity guarantee. Any Microsoft artifact that ships or...