← Back

CVE-2026-40223

nvd nist
Published: Apr 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.

Affected (1)

Systemd Project
1 product
Systemd
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Systemd
From 258 to 260

Related CWEs

CWE-696
Incorrect Behavior Order
The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways which may produce resultant weaknesses.

References (1)

Source: cve@mitre.org
Vendor Advisory

Timeline

No history available yet.