CVE-2026-40223

Description

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.

PUBLISHED Reserved 2026-04-10 | Published 2026-04-10 | Updated 2026-04-15 | Assigner mitre

Problem types

CWE-696 Incorrect Behavior Order

Product status

References

github.com/...ystemd/security/advisories/GHSA-x4h8-rrrg-q78f

cve.org (CVE-2026-40223)

nvd.nist.gov (CVE-2026-40223)

Download JSON