Every CVE Search/ Get API key

CVE-2026-40226

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted...

6.4 MediumFix available

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.07%Up 0.1 points since Apr 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.4

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Record
CVE-2026-40226
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-348
Updated
2026-11-02
EUVDEUVD-2026-21400 6.4

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Record
EUVD-2026-21400
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-hc7r-6254-88w5 6.4

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted...

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Record
GHSA-hc7r-6254-88w5
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-348
Updated
2026-11-02
NVD 6.4

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Record
CVE-2026-40226
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-348
Updated
2026-11-02
OSV 6.4

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Record
CVE-2026-40226
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-348
Updated
2026-11-02
OSVDEBIAN-CVE-2026-40226 6.4

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Record
DEBIAN-CVE-2026-40226
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 21 moreShow less
OSVOESA-2026-2277 6.4

systemd security update

systemd is a system and service manager that runs as PID 1 and starts the rest of the system.

Security Fix(es):

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.(CVE-2026-40226)

Record
OESA-2026-2277
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2278 6.4

systemd security update

systemd is a system and service manager that runs as PID 1 and starts the rest of the system.

Security Fix(es):

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.(CVE-2026-40226)

Record
OESA-2026-2278
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2279 6.4

systemd security update

systemd is a system and service manager that runs as PID 1 and starts the rest of the system.

Security Fix(es):

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.(CVE-2026-40226)

Record
OESA-2026-2279
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2280 6.4

systemd security update

systemd is a system and service manager that runs as PID 1 and starts the rest of the system.

Security Fix(es):

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.(CVE-2026-40226)

Record
OESA-2026-2280
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2358 6.4

systemd security update

systemd is a system and service manager that runs as PID 1 and starts the rest of the system.

Security Fix(es):

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.(CVE-2026-40226)

Record
OESA-2026-2358
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7299 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7299
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-40226 6.4

CVE-2026-40226 in rootio-systemd - Patched by Root

Root has patched CVE-2026-40226 in the rootio-systemd package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-40226
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-40226 6.4

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Record
UBUNTU-CVE-2026-40226
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-82646 No score

CVE-2026-40226 affecting package systemd for versions less than 255-30

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Record
AZL-82646
Updated
2026-11-05
OSVCLSA-2026-1786542017 No score

systemd: Fix of 2 CVEs

  • CVE-2026-40226: nspawn: apply BindUser/Ephemeral from settings file only if trusted and normalize pivot_root paths
Record
CLSA-2026-1786542017
Updated
2026-11-02
OSVCLSA-2026-1787064068 No score

systemd: Fix of 2 CVEs

  • CVE-2026-40226: apply trusted-settings checks and normalize pivot root paths in systemd-nspawn
  • CVE-2026-40225: validate kernel-provided fields before emitting udev properties
Record
CLSA-2026-1787064068
Updated
2026-11-02
OSVopenSUSE-SU-2026:21754-1 No score

Security update for systemd

This update for systemd fixes the following issue:

Security issue fixed:

  • CVE-2026-16742: systemd-homed: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444).

Non security issue fixed:

  • systemd-resolved fails to start due to write access to tmpfs denied (bsc#1237515).
Record
openSUSE-SU-2026:21754-1
Updated
2026-11-02
OSVSUSE-SU-2026:22736-1 No score

Security update for systemd

This update for systemd fixes the following issues:

Security issues fixed:

  • CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400).

Other updates and bugfixes:

  • Import commit 260e668bfa (bsc#1267647 bsc#1262305 bsc#1267644).
  • Import commit 58e5d2e21e (bsc#1261982).
  • Import commit 4bd91117cc (bsc#1261983).
Record
SUSE-SU-2026:22736-1
Updated
2026-11-02
OSVSUSE-SU-2026:22890-1 No score

Security update for systemd

This update for systemd fixes the following issues

Security issues fixed:

  • CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400).

Other updates and bugfixes:

  • Import commit 260e668bfa (bsc#1267647 bsc#1262305 bsc#1267644).
  • Import commit 58e5d2e21e (bsc#1261982).
  • Import commit 4bd91117cc (bsc#1261983).
Record
SUSE-SU-2026:22890-1
Updated
2026-11-02
OSVSUSE-SU-2026:23454-1 No score

Security update for systemd

This update for systemd fixes the following issue:

Security issue fixed:

  • CVE-2026-16742: systemd-homed: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444).

Non security issue fixed:

  • systemd-resolved fails to start due to write access to tmpfs denied (bsc#1237515).
Record
SUSE-SU-2026:23454-1
Updated
2026-11-02
OSVSUSE-SU-2026:23470-1 No score

Security update for systemd

This update for systemd fixes the following issue:

Security issue fixed:

  • CVE-2026-16742: systemd-homed: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444).

Non security issue fixed:

  • systemd-resolved fails to start due to write access to tmpfs denied (bsc#1237515).
Record
SUSE-SU-2026:23470-1
Updated
2026-11-02
OSVSUSE-SU-2026:23620-1 No score

Security update for systemd

This update for systemd fixes the following issue:

Security issue fixed:

  • CVE-2026-16742: systemd-homed: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444).

Non security issue fixed:

  • systemd-resolved fails to start due to write access to tmpfs denied (bsc#1237515).
Record
SUSE-SU-2026:23620-1
Updated
2026-11-02
OSVSUSE-SU-2026:2785-1 No score

Security update for systemd, systemd-mini

This update for systemd, systemd-mini fixes the following issue

Security issues fixed:

  • CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400).

Other updates and bugfixes:

  • Import commit eba1930de8 (bsc#1267647).
  • Import commit 5d46cdd987 (bsc#1261982 bsc#1261983).
  • Import commit ac1173932c (bsc#1261982).
  • Import commit c7f3e89374 (bsc#1261983).
Record
SUSE-SU-2026:2785-1
Updated
2026-11-02
OSVSUSE-SU-2026:2809-1 No score

Security update for systemd

This update for systemd fixes the following issue

Security issues fixed:

  • CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400).

Other updates and bugfixes:

  • Import commit 37508f8ec1 (bsc#1267647).
  • Import commit c7530fbea3 (bsc#1261982 bsc#1261983).
  • Import commit 5c4ed461a7 (bsc#1261982).
  • Import commit 4b963df038 (bsc#1261983).
Record
SUSE-SU-2026:2809-1
Updated
2026-11-02
OSVSUSE-SU-2026:3244-1 No score

Security update for systemd

This update for systemd fixes the following issues

Security issues fixed:

  • CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400).

Other updates and bugfixes:

  • Fix soft reboot not restarting user services with default.target (bsc#1262305).
  • Import commit e46e1952d5 (bsc#1267647 bsc#1262305 bsc#1267644).
  • Import commit 429043ca9a (bsc#1261982 bsc#1261983).
  • Import commit 58e5d2e21e (bsc#1261982).
  • Import commit 4bd91117cc (bsc#1261983).
Record
SUSE-SU-2026:3244-1
Updated
2026-11-02
OSVUSN-8402-1 No score

systemd vulnerabilities

It was discovered that systemd-nspawn incorrectly handled certain optional configuration files. A local attacker could possibly use this issue to escape to the host system and execute arbitrary code. (CVE-2026-40226)

It was discovered that systemd-resolved incorrectly validated DNSSEC records for signed domains. An attacker could possibly use this issue to manipulate DNS records. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-7008)

Record
USN-8402-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
systemd
Azure Linux:3
 before 255-30
255-30
rhel-net-naming-sysattrs
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-boot-unsigned
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-container
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-devel
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-journal-remote
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-libs
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-oomd
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-pam
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
Show 72 moreShow less
Affected packages
PackageAffectedFixed
systemd-resolved
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-rpm-macros
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-standalone-sysusers
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-standalone-tmpfiles
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-udev
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd-ukify
TuxCare:AlmaLinux:9.6
 before 252-51.el9_6.3.alma.2.tuxcare.els4
252-51.el9_6.3.alma.2.tuxcare.els4
systemd
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-boot-unsigned
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-container
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-journal-remote
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-oomd
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-pam
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-resolved
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-rpm-macros
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-standalone-sysusers
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-standalone-tmpfiles
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd-udev
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 252-14.el9_2.3.tuxcare.els4
252-14.el9_2.3.tuxcare.els4
systemd
Debian:12
 before 252.39-1~deb12u2, plus listed versions
252.11-1252.11-1~deb12u1252.12-1~deb12u1252.14-1~deb12u1252.16-1~deb12u1
Show 26 moreShow less
252.17-1~deb12u1252.18-1~deb12u1252.19-1~deb12u1252.20-1~deb12u1252.21-1~deb12u1252.22-1~deb12u1252.23-1~deb12u1252.24-1~deb12u1252.25-1~deb12u1252.26-1~deb12u1252.26-1~deb12u2252.26-1~deb12u2~bpo11+1252.27-1~deb12u1252.28-1~deb12u1252.29-1~deb12u1252.29-1~deb12u1~bpo11+1252.30-1~deb12u1252.30-1~deb12u2252.31-1~deb12u1252.32-1~deb12u1252.33-1~deb12u1252.36-1~deb12u1252.38-1~deb12u1252.39-1~deb12u1252.6-1252.6-1+loong64
252.39-1~deb12u2
systemd
Debian:13
 before 257.13-1~deb13u1, plus listed versions
257.7-1257.8-1~deb13u1257.8-1~deb13u2257.9-1~deb13u1
257.13-1~deb13u1
systemd
Debian:14
 before 260~rc3-1, plus listed versions
257.13-1~deb13u1257.7-1257.8-1~deb13u1257.8-1~deb13u2257.9-1~deb13u1
Show 16 moreShow less
258-1258.1-1258.1-2258~rc1-1258~rc2-1258~rc2-2258~rc3-1258~rc4-1259-1259.1-1259~rc1-1259~rc2-1259~rc3-1260~rc1-1260~rc1-2260~rc2-1
260~rc3-1
systemd
openEuler:24.03-LTS-SP1
 before 255-58.oe2403sp1
255-58.oe2403sp1
systemd
openEuler:24.03-LTS-SP3
 before 255-58.oe2403sp3
255-58.oe2403sp3
systemd
openEuler:22.03-LTS-SP4
 before 249-114.oe2203sp4
249-114.oe2203sp4
systemd
openEuler:24.03-LTS
 before 255-58.oe2403
255-58.oe2403
systemd
openEuler:20.03-LTS-SP4
 before 243-90.oe2003sp4
243-90.oe2003sp4
systemd
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-boot-unsigned
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-container
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-devel
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-journal-remote
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-libs
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-networkd
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-networkd-defaults
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-oomd-defaults
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-pam
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-resolved
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-rpm-macros
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-shared
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-standalone-repart
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-standalone-shutdown
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-standalone-sysusers
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-standalone-tmpfiles
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-sysusers
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-tests
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-udev
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-ukify
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd
SUSE:Linux Micro 6.0
 before 254.27-4.1
254.27-4.1
systemd
SUSE:Linux Micro 6.1
 before 254.27-slfo.1.1_5.1
254.27-slfo.1.1_5.1
systemd
SUSE:Linux Micro Extras 6.2
From an advisory covering 4 CVEs
 before 257.13-160000.4.1
257.13-160000.4.1
systemd
SUSE:Linux Micro 6.2
From an advisory covering 4 CVEs
 before 257.13-160000.4.1
257.13-160000.4.1
systemd
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 257.13-160000.4.1
257.13-160000.4.1
systemd
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 257.13-160000.4.1
257.13-160000.4.1
systemd
SUSE:Linux Enterprise Micro 5.2
 before 246.16-150300.7.74.1
246.16-150300.7.74.1
systemd
SUSE:Linux Enterprise Micro 5.3
 before 249.17-150400.8.64.1
249.17-150400.8.64.1
systemd
SUSE:Linux Enterprise Micro 5.4
 before 249.17-150400.8.64.1
249.17-150400.8.64.1
systemd
SUSE:Linux Enterprise Micro 5.5
 before 249.17-150400.8.64.1
249.17-150400.8.64.1
systemd
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 254.27-150600.4.71.2
254.27-150600.4.71.2
systemd
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 254.27-150600.4.71.2
254.27-150600.4.71.2
systemd
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
204-0ubuntu18204-0ubuntu19204-5ubuntu3204-5ubuntu5204-5ubuntu6
Show 40 moreShow less
204-5ubuntu7204-5ubuntu8204-5ubuntu9204-5ubuntu10204-5ubuntu11204-5ubuntu13204-5ubuntu14204-5ubuntu15204-5ubuntu16204-5ubuntu17204-5ubuntu18204-5ubuntu19204-5ubuntu20204-5ubuntu20.2204-5ubuntu20.3204-5ubuntu20.4204-5ubuntu20.5204-5ubuntu20.6204-5ubuntu20.7204-5ubuntu20.8204-5ubuntu20.9204-5ubuntu20.10204-5ubuntu20.11204-5ubuntu20.12204-5ubuntu20.13204-5ubuntu20.14204-5ubuntu20.15204-5ubuntu20.18204-5ubuntu20.19204-5ubuntu20.20204-5ubuntu20.21204-5ubuntu20.22204-5ubuntu20.24204-5ubuntu20.25204-5ubuntu20.26204-5ubuntu20.28204-5ubuntu20.29204-5ubuntu20.31204-5ubuntu20.31+esm2204-5ubuntu20.31+esm3
 None known
systemd
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
225-1ubuntu9227-2ubuntu1227-2ubuntu2228-1ubuntu2228-2ubuntu1
Show 45 moreShow less
228-2ubuntu2228-3ubuntu1228-4ubuntu1228-4ubuntu2228-5ubuntu1228-5ubuntu2228-5ubuntu3228-6ubuntu1229-1ubuntu2229-1ubuntu4229-2ubuntu1229-3ubuntu1229-3ubuntu2229-4ubuntu1229-4ubuntu4229-4ubuntu5229-4ubuntu6229-4ubuntu7229-4ubuntu8229-4ubuntu10229-4ubuntu11229-4ubuntu12229-4ubuntu13229-4ubuntu16229-4ubuntu17229-4ubuntu19229-4ubuntu20229-4ubuntu21229-4ubuntu21.1229-4ubuntu21.2229-4ubuntu21.3229-4ubuntu21.4229-4ubuntu21.5229-4ubuntu21.6229-4ubuntu21.8229-4ubuntu21.9229-4ubuntu21.10229-4ubuntu21.15229-4ubuntu21.16229-4ubuntu21.17229-4ubuntu21.19229-4ubuntu21.21229-4ubuntu21.22229-4ubuntu21.23229-4ubuntu21.27
 None known
systemd
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
234-2ubuntu12235-2ubuntu3235-3ubuntu2235-3ubuntu3237-3ubuntu3
Show 45 moreShow less
237-3ubuntu4237-3ubuntu6237-3ubuntu7237-3ubuntu8237-3ubuntu10237-3ubuntu10.2237-3ubuntu10.3237-3ubuntu10.4237-3ubuntu10.6237-3ubuntu10.9237-3ubuntu10.11237-3ubuntu10.12237-3ubuntu10.13237-3ubuntu10.15237-3ubuntu10.17237-3ubuntu10.19237-3ubuntu10.20237-3ubuntu10.21237-3ubuntu10.22237-3ubuntu10.23237-3ubuntu10.24237-3ubuntu10.25237-3ubuntu10.26237-3ubuntu10.28237-3ubuntu10.29237-3ubuntu10.31237-3ubuntu10.33237-3ubuntu10.38237-3ubuntu10.39237-3ubuntu10.40237-3ubuntu10.41237-3ubuntu10.42237-3ubuntu10.43237-3ubuntu10.44237-3ubuntu10.45237-3ubuntu10.46237-3ubuntu10.47237-3ubuntu10.48237-3ubuntu10.49237-3ubuntu10.50237-3ubuntu10.51237-3ubuntu10.52237-3ubuntu10.53237-3ubuntu10.54237-3ubuntu10.56
 None known
systemd
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
242-7ubuntu3243-2ubuntu1243-3ubuntu1244-3ubuntu1244.1-0ubuntu2
Show 34 moreShow less
244.1-0ubuntu3244.2-1ubuntu1244.3-1ubuntu1245.2-1ubuntu1245.2-1ubuntu2245.4-2ubuntu1245.4-4ubuntu1245.4-4ubuntu3245.4-4ubuntu3.1245.4-4ubuntu3.2245.4-4ubuntu3.3245.4-4ubuntu3.4245.4-4ubuntu3.5245.4-4ubuntu3.6245.4-4ubuntu3.7245.4-4ubuntu3.10245.4-4ubuntu3.11245.4-4ubuntu3.13245.4-4ubuntu3.14245.4-4ubuntu3.15245.4-4ubuntu3.16245.4-4ubuntu3.17245.4-4ubuntu3.18245.4-4ubuntu3.19245.4-4ubuntu3.20245.4-4ubuntu3.21245.4-4ubuntu3.22245.4-4ubuntu3.23245.4-4ubuntu3.24245.4-4ubuntu3.24+esm1245.4-4ubuntu3.24+esm3245.4-4ubuntu3.24+esm4245.4-4ubuntu3.24+esm5245.4-4ubuntu3.24+esm6
 None known
systemd
Ubuntu:22.04:LTS
 before 249.11-0ubuntu3.21, plus listed versions
248.3-1ubuntu8249.5-2ubuntu1249.5-2ubuntu2249.5-2ubuntu3249.5-2ubuntu4
Show 20 moreShow less
249.9-0ubuntu2249.10-0ubuntu1249.10-0ubuntu2249.11-0ubuntu1249.11-0ubuntu2249.11-0ubuntu3249.11-0ubuntu3.1249.11-0ubuntu3.3249.11-0ubuntu3.4249.11-0ubuntu3.6249.11-0ubuntu3.7249.11-0ubuntu3.9249.11-0ubuntu3.10249.11-0ubuntu3.11249.11-0ubuntu3.12249.11-0ubuntu3.15249.11-0ubuntu3.16249.11-0ubuntu3.17249.11-0ubuntu3.19249.11-0ubuntu3.20
249.11-0ubuntu3.21
systemd
Ubuntu:24.04:LTS
 before 255.4-1ubuntu8.16, plus listed versions
253.5-1ubuntu6253.5-1ubuntu7255.2-3ubuntu2255.4-1ubuntu5255.4-1ubuntu6
Show 13 moreShow less
255.4-1ubuntu7255.4-1ubuntu8255.4-1ubuntu8.1255.4-1ubuntu8.2255.4-1ubuntu8.4255.4-1ubuntu8.5255.4-1ubuntu8.6255.4-1ubuntu8.8255.4-1ubuntu8.10255.4-1ubuntu8.11255.4-1ubuntu8.12255.4-1ubuntu8.14255.4-1ubuntu8.15
255.4-1ubuntu8.16
systemd
Ubuntu:25.10
 before 257.9-0ubuntu2.5, plus listed versions
257.4-1ubuntu3257.6-1ubuntu1257.7-1ubuntu1257.7-1ubuntu3257.8-0ubuntu2
Show 5 moreShow less
257.9-0ubuntu1257.9-0ubuntu2257.9-0ubuntu2.1257.9-0ubuntu2.3257.9-0ubuntu2.4
257.9-0ubuntu2.5
systemd
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 249.11-0ubuntu3.21, plus listed versions
248.3-1ubuntu8249.5-2ubuntu1249.5-2ubuntu2249.5-2ubuntu3249.5-2ubuntu4
Show 20 moreShow less
249.9-0ubuntu2249.10-0ubuntu1249.10-0ubuntu2249.11-0ubuntu1249.11-0ubuntu2249.11-0ubuntu3249.11-0ubuntu3.1249.11-0ubuntu3.3249.11-0ubuntu3.4249.11-0ubuntu3.6249.11-0ubuntu3.7249.11-0ubuntu3.9249.11-0ubuntu3.10249.11-0ubuntu3.11249.11-0ubuntu3.12249.11-0ubuntu3.15249.11-0ubuntu3.16249.11-0ubuntu3.17249.11-0ubuntu3.19249.11-0ubuntu3.20
249.11-0ubuntu3.21
systemd
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 255.4-1ubuntu8.16, plus listed versions
253.5-1ubuntu6253.5-1ubuntu7255.2-3ubuntu2255.4-1ubuntu5255.4-1ubuntu6
Show 13 moreShow less
255.4-1ubuntu7255.4-1ubuntu8255.4-1ubuntu8.1255.4-1ubuntu8.2255.4-1ubuntu8.4255.4-1ubuntu8.5255.4-1ubuntu8.6255.4-1ubuntu8.8255.4-1ubuntu8.10255.4-1ubuntu8.11255.4-1ubuntu8.12255.4-1ubuntu8.14255.4-1ubuntu8.15
255.4-1ubuntu8.16
systemd
Ubuntu:25.10
From an advisory covering 2 CVEs
 before 257.9-0ubuntu2.5, plus listed versions
257.4-1ubuntu3257.6-1ubuntu1257.7-1ubuntu1257.7-1ubuntu3257.8-0ubuntu2
Show 5 moreShow less
257.9-0ubuntu1257.9-0ubuntu2257.9-0ubuntu2.1257.9-0ubuntu2.3257.9-0ubuntu2.4
257.9-0ubuntu2.5
systemd
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 257.13-160000.4.1
257.13-160000.4.1
systemd-mini
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 257.13-160000.4.1
257.13-160000.4.1

History

History
RecordedChangedSources
affected
factsOSV
affected
affected, aliases, published, referencesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-40226 is a medium vulnerability (CVSS 6.4) in Systemd, published April 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.07%, the 0th percentile. Fixed in systemd 255-30.

References

Show 84 moreShow less
This page doesn't list everything

Left out here: 11 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open