PT-2026-31935 · Systemd+3 · Systemd-Nspawn+3

CVE-2026-40226

·

Published

2026-03-12

·

Updated

2026-09-07

CVSS v3.1

6.4

Medium

VectorAV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions systemd versions 233 through 259
Description A flaw in nspawn allows an escape-to-host action to occur through the use of a crafted optional configuration file.
Recommendations Update to version 260.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-82646
BDU:2026-11385
CVE-2026-40226
ECHO-918A-FD9A-B2CD
GHSA-9MJ4-RRC3-GJCX
OESA-2026-2277
OESA-2026-2278
OESA-2026-2279
OESA-2026-2280
OESA-2026-2358
OPENSUSE-SU-2026:21754-1
RHSA-2026:7299
SUSE-SU-2026:22736-1
SUSE-SU-2026:22890-1
SUSE-SU-2026:2785-1
SUSE-SU-2026:2809-1
SUSE-SU-2026:3244-1
USN-8402-1

Affected Products

Linuxmint
Red Os
Ubuntu
Systemd-Nspawn