CVE-2026-40227

Опубликовано: 10 апр. 2026

Источник: debian

Описание

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.

Пакет	Статус	Версия исправления	Релиз	Тип
systemd	fixed	260.1-1		package
systemd	not-affected		trixie	package
systemd	not-affected		bookworm	package
systemd	not-affected		bullseye	package

https://github.com/systemd/systemd/security/advisories/GHSA-848h-497j-8vjq
Introduced with: https://github.com/systemd/systemd/commit/799392286ec0797c0a2a1260c444360b47ef36fc (v260-rc1)
Fixed by: https://github.com/systemd/systemd/commit/924f5a3461512ac8126fe4423329e3ca802b4d20 (main)
Fixed by: https://github.com/systemd/systemd/commit/6f3074088a9f89f89d3188f7b3b4f0ddc0cfc73b (v260.1)

CVE-2026-40227

CVSS3: 6.2

ubuntu

4 месяца назад

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.

CVE-2026-40227

CVSS3: 5.5

redhat

4 месяца назад

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.

CVE-2026-40227

CVSS3: 6.2

nvd

4 месяца назад

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.

GHSA-x53v-pxf5-chx6

CVSS3: 6.2

github

4 месяца назад

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.