CVE-2026-40223 - systemd/systemd
In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.
CWE-696 / CVSS 4.7 (MEDIUM)
Evidence
- upstream fix 05f5156a verified present in fork
- fork validate_ownership gate dbus-unit.c:1633-1636
- TEST-07 extension, test-only, 35 insertions
History
- 2026-10-28: fork-fixed - merged to fork main 0e00565