CVE-2019-3844

CVE-2019-3844 describes a privilege escalation vulnerability in systemd services utilizing the DynamicUser property, affecting canonical, NetApp, and systemd_project. A local attacker can exploit this flaw by leveraging SUID binaries to create setgid binaries owned by a service's transient group, potentially gaining access to resources of future services when GIDs are recycled. This vulnerability carries a high CVSS score of 7.8 due to its low attack complexity and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB proof-of-concept (EDB-46760) exists, though community discussion and media coverage are minimal.