CVE-2026-16552

Name of the Vulnerable Software and Affected Versions systemd-tmpfiles (affected versions not specified)

Description A flaw exists in systemd-tmpfiles during the processing of tmpfiles.d configuration entries that write to a file. The utility may follow a symbolic link created by an unprivileged local user because a safety check incorrectly treats transitions away from the root user as safe. On systems where a tmpfiles.d configuration targets a path that an unprivileged user can influence, this allows the user to redirect a privileged write operation to an arbitrary file. While the destination file can be chosen by the user, the content written is still determined by the existing configuration. This issue primarily impacts system integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.