← All advisories

Medium severity4.7NVD Advisory· Published Apr 10, 2026· Updated Apr 27, 2026

CVE-2026-40223

CVE-2026-40223

Description

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Systemd Project/Systemd2 versions
cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*range: >=258,<260
- (no CPE)range: >=258,<260

Patches

Vulnerability mechanics

References

1

github.com/systemd/systemd/security/advisories/GHSA-x4h8-rrrg-q78fnvdVendor Advisory

News mentions

0

No linked articles in our index yet.