https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:44:53.405392+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-6954 UBUNTU-CVE-2018-6954 2026-10-03T03:44:53.406967+00:00

Affected: Ubuntu:16.04:LTS: systemd, Ubuntu:18.04:LTS: systemd

systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.