CVE-2025-4598 Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Found in Systemd Affecting Local Security Two vulnerabilities in systemd have been reported. CVE-2022-4415, published on January 11, 2023, allows local information leaks due to improper handling of the fs.suid_dumpable kernel setting. CVE-2025-4598, published on May 30, 2025, involves a race condition that enables local attackers to crash suid programs and access core dumps. 2 sources 64