CVE-2026-16742 - systemd/systemd
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user
CVSS 6.7 (MEDIUM)
Evidence
- CVE trailer under review: public record defines this ID as signature verification
- Committed test needs live execution before merge
History
- 2026-10-28: needs-rework - Adversarial review failed the CVE label and test proof
- 2026-10-28: fork-fixed - reframed as hardening; merged to fork main 0e00565