PT-2026-31932

CVE-2026-40223

Published

2026-04-10

Updated

2026-04-10

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions systemd versions 258 through 259

Description A local unprivileged user can trigger an assert when a unit with Delegate=yes and User=<unset> is running.

Recommendations Update to version 260.

Exploitability

Exploit

Fix

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-X4H8-RRRG-Q78F

RHSA-2026:7299

Found an issue in the description? Have something to add? Feel free to write us 👾