CVE-2018-6954

Name of the Vulnerable Software and Affected Versions systemd versions prior to 237

Description The issue is related to the mishandling of symlinks by systemd-tmpfiles in systemd, allowing local users to obtain ownership of arbitrary files. This occurs through the creation of a directory and a file under that directory, and later replacing that directory with a symlink. The issue persists even when the fs.protected symlinks sysctl is enabled.

Recommendations For versions prior to 237, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting the use of systemd-tmpfiles to minimize the risk of exploitation.