CVE-2026-40224
In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.
Original description
The description as published by the source.
In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-40224 systemd Fixed in: 260~rc2-1
- Ubuntu UBUNTU-CVE-2026-40224 systemd
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov