CVE-2026-40223

Опубликовано: 10 апр. 2026

Источник: nvd

CVSS3: 4.7

CVSS3: 5.5

EPSS Низкий

Описание

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running.

Ссылки

https://github.com/systemd/systemd/security/advisories/GHSA-x4h8-rrrg-q78f
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*

Версия от 258 (включая) до 260 (исключая)

EPSS

Процентиль: 0%

0.00086

Низкий

4.7 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-696

Связанные уязвимости

CVE-2026-40223

CVSS3: 4.7

ubuntu

4 месяца назад

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.

CVE-2026-40223

CVSS3: 4.7

redhat

4 месяца назад

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.

CVE-2026-40223

CVSS3: 4.7

debian

4 месяца назад

In systemd 258 before 260, a local unprivileged user can trigger an as ...

GHSA-52rm-r39v-fwv9

CVSS3: 4.7

github

4 месяца назад

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.

EPSS

Процентиль: 0%

0.00086

Низкий

4.7 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-696