This vulnerability in systemd-coredump allows a local attacker to exploit a race condition by crashing a SUID process and causing the Linux kernel to recycle its PID before systemd-coredump completes analysis of the /proc/pid/auxv file. If the attacker wins this race, they can access the original SUID process's core dump file, which contains sensitive information loaded into memory by the privileged process. This compromises confidentiality by exposing data such as the contents of /etc/shadow. The flaw affects Red Hat Enterprise Linux 10 versions 253.0 through 257.0. Red Hat has issued multiple security advisories and updates to address this issue.

An attacker with local access can crash a SUID process and exploit a race condition to read the resulting core dump file of that privileged process. This can lead to unauthorized disclosure of sensitive data loaded in memory by the SUID process, including highly sensitive files like /etc/shadow. The vulnerability impacts data confidentiality but does not affect integrity or availability. The CVSS 3.1 base score is 4.7 (medium severity) reflecting the local attack vector, high attack complexity, and limited privileges required.

Red Hat has released security updates that fix this race condition vulnerability in systemd-coredump. Users should apply the official patches provided in the Red Hat advisories (e.g., RHSA-2025:22660 and related errata) to remediate the issue. Applying these updates will prevent exploitation of the race condition and protect sensitive core dump data. No additional mitigation steps are indicated beyond applying the vendor-provided patches.