Local Privilege Escalation in systemd by systemd Vendor

CVE-2026-40224

What is CVE-2026-40224?

A local privilege escalation vulnerability exists in systemd versions prior to 260, specifically within systemd-machined. This flaw allows an authenticated user to exploit the Varlink interface to access the root namespace, potentially leading to unauthorized operations and system compromise. Administrators should prioritize updating to the latest version to mitigate risks associated with this vulnerability.

References