BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

CVE-2022-45873

5.5 medium SSVC exploitation: none Modified
NVD · CVE.org

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.

Fix

Patch, vendor advisory and mitigation references on NVD 6

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 5.5 · systemd_project, fedoraprojectNVD modified 2026-10-14 19:16

Affected (CPE criteria) 4

  • cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*
  • cpe:2.3:a:systemd_project:systemd:252:rc1:*:*:*:*:*:*
  • cpe:2.3:a:systemd_project:systemd:252:rc2:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

References 9