CVE-2026-40224: systemd_project systemd Incorrect Authorization
CVSS: 7.3v3.1HighAnalyzed
AliasesUBUNTU-CVE-2026-40224DEBIAN-CVE-2026-40224CGA-2wgj-m7j8-r2p2CGA-337g-v4m4-634wCGA-4c44-qpmr-982mCGA-58ww-66fv-mvmmCGA-692g-9w64-r7r6CGA-6gfc-4764-66p9CGA-6rc3-3v5p-8hq7CGA-6rf5-qhwh-hp73CGA-863g-h45g-6hpwCGA-8x5h-659h-m2cwCGA-hrrw-957v-2hjhCGA-pxhh-3p67-2mfvCGA-q8g5-m37v-gj65CGA-rqvx-62cj-v82jopenSUSE-SU-2026:10840-1
Published 10-04-2026Last modified 10-04-2026
Vulnerability summary
CVE-2026-40224 is a high (CVSS 7.3) Incorrect Authorization vulnerability in systemd_project systemd. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.4% of scored vulnerabilities.
CVSS score
7.3/10
010
High · v3.1 (NVD)EPSS score
0.12%
0%100%
Low · +0.04 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 10-04-2026PublishedVulnerability first disclosed.
- 10-04-2026Last modifiedVulnerability information updated.
Description
In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.
CVSS metrics
6 scores · 6 sources · 1 versionHigh 7.3Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HSources6 sources · 6.7–7.3
- CVE.orgCNA6.7MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- OSV · WolfiEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HDiffers
- OSV · ChainguardEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.12%
Chance of exploitation in the next 30 days
Percentile
1%
Versus all other CVEs
30-day change
+0.04 pp
From 0.08% on 19-09-2026
19-09-202619-10-2026
EPSS score0.12%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard7 products
- libsystemd< 259.3-r0
- libsystemd-compression-libs< 259.3-r0
- libsystemd-shared< 259.3-r0
- libudev< 259.3-r0
- systemd< 259.3-r0
Wolfi7 products
- libsystemd< 259.3-r0
- libsystemd-compression-libs< 259.3-r0
- libsystemd-shared< 259.3-r0
- libudev< 259.3-r0
- systemd< 259.3-r0
Debian1 product
- systemd< 260~rc2-1
Opensuse1 product
- systemd&distro=openSUSE Tumbleweed< 260.1-2.1
Systemd1 product
- systemd≥ 259, < 260
Systemd_project1 product
- systemd≥ 259, < 259.3
Ubuntu1 product
- systemdAll versions (No fix recorded)
7 vendors · 19 products
