Most recent entries from all

EUVD-2026-290473

fkie_cve-2026-40224

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.

GHSA-jf3x-2pf6-c45w

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.

openSUSE-SU-2026:10840-1 — libsystemd0-260.1-2.1 on GA media

libsystemd0-260.1-2.1 on GA media

RHSA-2026:7299 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data systemd: systemd: Local unprivileged user can cause Denial of Service systemd: systemd-machined: Local privilege escalation via varlink systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output systemd: systemd nspawn: Escape-to-host action via crafted config file systemd: systemd: Denial of Service via malicious IPC API call with null element systemd: systemd-journald: Unintended output to user terminals via logger command

Withdrawn: UBUNTU-CVE-2026-40224

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: systemd, Ubuntu:Pro:16.04:LTS: systemd, Ubuntu:Pro:18.04:LTS: systemd, Ubuntu:Pro:20.04:LTS: systemd, Ubuntu:22.04:LTS: systemd, Ubuntu:24.04:LTS: systemd, Ubuntu:25.10: systemd, Ubuntu:26.04:LTS: systemd

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.