PT-2026-31933 · Systemd · Systemd

·

CVE-2026-40224

·

Published

2026-04-10

·

Updated

2026-05-21

CVSS v3.1

7.3

High

VectorAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions systemd versions 259 through 259
Description A local privilege escalation exists in systemd-machined. This occurs because varlink, a lightweight communication protocol, can be used to reach the root namespace, allowing a local attacker to gain elevated privileges.
Recommendations Update to version 260.

Exploit

Fix

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-40224
GHSA-6PWP-J5VG-5J6M
OPENSUSE-SU-2026:10840-1
RHSA-2026:7299

Affected Products

Systemd