Red Hat Enterprise Linux 7/8/9/10 systemd access control

Summaryinfo

A vulnerability identified as critical has been detected in Red Hat Enterprise Linux 7/8/9/10. Affected by this issue is some unknown functionality of the component systemd. Performing a manipulation results in access control. This vulnerability is known as CVE-2026-4105. Attacking locally is a requirement. No exploit is available.

Detailsinfo

A vulnerability was found in Red Hat Enterprise Linux 7/8/9/10. It has been classified as critical. This affects some unknown functionality of the component systemd. The manipulation with an unknown input leads to a access control vulnerability. CWE is classifying the issue as CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.

It is possible to read the advisory at access.redhat.com. This vulnerability is uniquely identified as CVE-2026-4105 since 03/13/2026. The exploitability is told to be easy. Attacking locally is a requirement. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 04/13/2026). The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

The vulnerability scanner Nessus provides a plugin with the ID 302156 (Linux Distros Unpatched Vulnerability : CVE-2026-4105), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (302156) and CERT Bund (WID-SEC-2026-0720). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Affected

• SUSE Linux
• Open Source systemd

Productinfo

Type

• Operating System

Vendor

• Red Hat

Name

• Enterprise Linux

Version

• 7
• 8
• 9
• 10

License

• commercial

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion