RHSA-2026:46016MediumCVSS 5.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
July 26, 2026
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-15059 →

📋 Description

CVE-2026-15059 — systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

🎯 Affected products44

  • Red Hat Hardened Images
  • systemd-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-0:261.2-1.hum1@src as a component of Red Hat Hardened Images
  • systemd-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-boot-unsigned-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-boot-unsigned-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-container-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-container-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-devel-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-devel-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-journal-remote-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-journal-remote-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-libs-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-libs-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-networkd-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-networkd-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-networkd-defaults-0:261.2-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • systemd-networkd-defaults-0:261.2-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • systemd-oomd-defaults-0:261.2-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • systemd-oomd-defaults-0:261.2-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • systemd-pam-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-pam-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-resolved-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-resolved-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-rpm-macros-0:261.2-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • systemd-rpm-macros-0:261.2-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • systemd-shared-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-shared-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • systemd-standalone-repart-0:261.2-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • systemd-standalone-repart-0:261.2-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • +14 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: On systems that do not require memory-pressure-based OOM management, disable the systemd-oomd service to remove the attack surface entirely: systemctl disable --now systemd-oomd.service Where systemd-oomd must remain enabled, restrict local access to untrusted users. Note that on Red Hat Enterprise Linux server profiles systemd-oomd is not enabled by default, so default server installations are not exposed until the service is explicitly started.

🔗 References (5)