buildroot ▾
›
master ▾
›
vulnerability
›
CVE-2026-40223
Component Overview
Vulnerability Overview
Name
CVE-2026-40223
Source
NVD (
link
)
Debian (
link
)
Description
In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.
CWEs
CWE-696
Published Date
Apr 10, 2026
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://github.com/systemd/systemd/security/advisories/GHSA-x4h8-rrrg-q78f
Vendor Advisory
Analysis
#
Affected Component
Analysis
systemd
Exploitable
Vulnerability Ratings
#
4.7
CVSSv31
5.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
systemd
buildroot
2025.02.x
256.17
Not Affected
systemd
yocto
kirkstone
250.14
Not Affected
systemd
yocto
master
259.5
Exploitable
systemd
yocto
scarthgap
255.21
Not Affected