p PatchFirst

CVE-2026-40226

CVE-2026-40226

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

CVSS 6.4 · Medium · EPSS 0.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • systemd

    Versions
    • ≥ 233, < 260: Affected (custom)

    Update to 260

  • systemd Debian:12

    Versions
    • 252.11-1
    • 252.11-1~deb12u1
    • 252.12-1~deb12u1
    • 252.14-1~deb12u1
    • 252.16-1~deb12u1
    • 252.17-1~deb12u1
    • 252.18-1~deb12u1
    • 252.19-1~deb12u1
    • 252.20-1~deb12u1
    • 252.21-1~deb12u1
    • 252.22-1~deb12u1
    • 252.23-1~deb12u1
    • 252.24-1~deb12u1
    • 252.25-1~deb12u1
    • 252.26-1~deb12u1
    • 252.26-1~deb12u2
    • 252.26-1~deb12u2~bpo11+1
    • 252.27-1~deb12u1
    • 252.28-1~deb12u1
    • 252.29-1~deb12u1
    • 252.29-1~deb12u1~bpo11+1
    • 252.30-1~deb12u1
    • 252.30-1~deb12u2
    • 252.31-1~deb12u1
    • 252.32-1~deb12u1
    • 252.33-1~deb12u1
    • 252.36-1~deb12u1
    • 252.38-1~deb12u1
    • 252.39-1~deb12u1
    • 252.6-1
    • 252.6-1+loong64
    Affected ranges
    • ECOSYSTEM: < 252.39-1~deb12u2

    Update to 252.39-1~deb12u2

  • systemd Debian:13

    Versions
    • 257.7-1
    • 257.8-1~deb13u1
    • 257.8-1~deb13u2
    • 257.9-1~deb13u1
    Affected ranges
    • ECOSYSTEM: < 257.13-1~deb13u1

    Update to 257.13-1~deb13u1

  • systemd Debian:14

    Versions
    • 257.13-1~deb13u1
    • 257.7-1
    • 257.8-1~deb13u1
    • 257.8-1~deb13u2
    • 257.9-1~deb13u1
    • 258-1
    • 258.1-1
    • 258.1-2
    • 258~rc1-1
    • 258~rc2-1
    • 258~rc2-2
    • 258~rc3-1
    • 258~rc4-1
    • 259-1
    • 259.1-1
    • 259~rc1-1
    • 259~rc2-1
    • 259~rc3-1
    • 260~rc1-1
    • 260~rc1-2
    • 260~rc2-1
    Affected ranges
    • ECOSYSTEM: < 260~rc3-1

    Update to 260~rc3-1

  • systemd Ubuntu:Pro:14.04:LTS

    Versions
    • 204-0ubuntu18
    • 204-0ubuntu19
    • 204-5ubuntu3
    • 204-5ubuntu5
    • 204-5ubuntu6
    • 204-5ubuntu7
    • 204-5ubuntu8
    • 204-5ubuntu9
    • 204-5ubuntu10
    • 204-5ubuntu11
    • 204-5ubuntu13
    • 204-5ubuntu14
    • 204-5ubuntu15
    • 204-5ubuntu16
    • 204-5ubuntu17
    • 204-5ubuntu18
    • 204-5ubuntu19
    • 204-5ubuntu20
    • 204-5ubuntu20.2
    • 204-5ubuntu20.3
    • 204-5ubuntu20.4
    • 204-5ubuntu20.5
    • 204-5ubuntu20.6
    • 204-5ubuntu20.7
    • 204-5ubuntu20.8
    • 204-5ubuntu20.9
    • 204-5ubuntu20.10
    • 204-5ubuntu20.11
    • 204-5ubuntu20.12
    • 204-5ubuntu20.13
    • 204-5ubuntu20.14
    • 204-5ubuntu20.15
    • 204-5ubuntu20.18
    • 204-5ubuntu20.19
    • 204-5ubuntu20.20
    • 204-5ubuntu20.21
    • 204-5ubuntu20.22
    • 204-5ubuntu20.24
    • 204-5ubuntu20.25
    • 204-5ubuntu20.26
    • 204-5ubuntu20.28
    • 204-5ubuntu20.29
    • 204-5ubuntu20.31
    • 204-5ubuntu20.31+esm2
    • 204-5ubuntu20.31+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • systemd Ubuntu:Pro:16.04:LTS

    Versions
    • 225-1ubuntu9
    • 227-2ubuntu1
    • 227-2ubuntu2
    • 228-1ubuntu2
    • 228-2ubuntu1
    • 228-2ubuntu2
    • 228-3ubuntu1
    • 228-4ubuntu1
    • 228-4ubuntu2
    • 228-5ubuntu1
    • 228-5ubuntu2
    • 228-5ubuntu3
    • 228-6ubuntu1
    • 229-1ubuntu2
    • 229-1ubuntu4
    • 229-2ubuntu1
    • 229-3ubuntu1
    • 229-3ubuntu2
    • 229-4ubuntu1
    • 229-4ubuntu4
    • 229-4ubuntu5
    • 229-4ubuntu6
    • 229-4ubuntu7
    • 229-4ubuntu8
    • 229-4ubuntu10
    • 229-4ubuntu11
    • 229-4ubuntu12
    • 229-4ubuntu13
    • 229-4ubuntu16
    • 229-4ubuntu17
    • 229-4ubuntu19
    • 229-4ubuntu20
    • 229-4ubuntu21
    • 229-4ubuntu21.1
    • 229-4ubuntu21.2
    • 229-4ubuntu21.3
    • 229-4ubuntu21.4
    • 229-4ubuntu21.5
    • 229-4ubuntu21.6
    • 229-4ubuntu21.8
    • 229-4ubuntu21.9
    • 229-4ubuntu21.10
    • 229-4ubuntu21.15
    • 229-4ubuntu21.16
    • 229-4ubuntu21.17
    • 229-4ubuntu21.19
    • 229-4ubuntu21.21
    • 229-4ubuntu21.22
    • 229-4ubuntu21.23
    • 229-4ubuntu21.27
    • 229-4ubuntu21.28
    • 229-4ubuntu21.29
    • 229-4ubuntu21.31
    • 229-4ubuntu21.31+esm1
    • 229-4ubuntu21.31+esm3
    • 229-4ubuntu21.31+esm4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • systemd Ubuntu:Pro:18.04:LTS

    Versions
    • 234-2ubuntu12
    • 235-2ubuntu3
    • 235-3ubuntu2
    • 235-3ubuntu3
    • 237-3ubuntu3
    • 237-3ubuntu4
    • 237-3ubuntu6
    • 237-3ubuntu7
    • 237-3ubuntu8
    • 237-3ubuntu10
    • 237-3ubuntu10.2
    • 237-3ubuntu10.3
    • 237-3ubuntu10.4
    • 237-3ubuntu10.6
    • 237-3ubuntu10.9
    • 237-3ubuntu10.11
    • 237-3ubuntu10.12
    • 237-3ubuntu10.13
    • 237-3ubuntu10.15
    • 237-3ubuntu10.17
    • 237-3ubuntu10.19
    • 237-3ubuntu10.20
    • 237-3ubuntu10.21
    • 237-3ubuntu10.22
    • 237-3ubuntu10.23
    • 237-3ubuntu10.24
    • 237-3ubuntu10.25
    • 237-3ubuntu10.26
    • 237-3ubuntu10.28
    • 237-3ubuntu10.29
    • 237-3ubuntu10.31
    • 237-3ubuntu10.33
    • 237-3ubuntu10.38
    • 237-3ubuntu10.39
    • 237-3ubuntu10.40
    • 237-3ubuntu10.41
    • 237-3ubuntu10.42
    • 237-3ubuntu10.43
    • 237-3ubuntu10.44
    • 237-3ubuntu10.45
    • 237-3ubuntu10.46
    • 237-3ubuntu10.47
    • 237-3ubuntu10.48
    • 237-3ubuntu10.49
    • 237-3ubuntu10.50
    • 237-3ubuntu10.51
    • 237-3ubuntu10.52
    • 237-3ubuntu10.53
    • 237-3ubuntu10.54
    • 237-3ubuntu10.56
    • 237-3ubuntu10.57
    • 237-3ubuntu10.57+esm2
    • 237-3ubuntu10.57+esm3
    • 237-3ubuntu10.57+esm4
    • 237-3ubuntu10.57+esm5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • systemd Ubuntu:Pro:20.04:LTS

    Versions
    • 242-7ubuntu3
    • 243-2ubuntu1
    • 243-3ubuntu1
    • 244-3ubuntu1
    • 244.1-0ubuntu2
    • 244.1-0ubuntu3
    • 244.2-1ubuntu1
    • 244.3-1ubuntu1
    • 245.2-1ubuntu1
    • 245.2-1ubuntu2
    • 245.4-2ubuntu1
    • 245.4-4ubuntu1
    • 245.4-4ubuntu3
    • 245.4-4ubuntu3.1
    • 245.4-4ubuntu3.2
    • 245.4-4ubuntu3.3
    • 245.4-4ubuntu3.4
    • 245.4-4ubuntu3.5
    • 245.4-4ubuntu3.6
    • 245.4-4ubuntu3.7
    • 245.4-4ubuntu3.10
    • 245.4-4ubuntu3.11
    • 245.4-4ubuntu3.13
    • 245.4-4ubuntu3.14
    • 245.4-4ubuntu3.15
    • 245.4-4ubuntu3.16
    • 245.4-4ubuntu3.17
    • 245.4-4ubuntu3.18
    • 245.4-4ubuntu3.19
    • 245.4-4ubuntu3.20
    • 245.4-4ubuntu3.21
    • 245.4-4ubuntu3.22
    • 245.4-4ubuntu3.23
    • 245.4-4ubuntu3.24
    • 245.4-4ubuntu3.24+esm1
    • 245.4-4ubuntu3.24+esm3
    • 245.4-4ubuntu3.24+esm4
    • 245.4-4ubuntu3.24+esm5
    • 245.4-4ubuntu3.24+esm6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • systemd Ubuntu:22.04:LTS

    Versions
    • 248.3-1ubuntu8
    • 249.5-2ubuntu1
    • 249.5-2ubuntu2
    • 249.5-2ubuntu3
    • 249.5-2ubuntu4
    • 249.9-0ubuntu2
    • 249.10-0ubuntu1
    • 249.10-0ubuntu2
    • 249.11-0ubuntu1
    • 249.11-0ubuntu2
    • 249.11-0ubuntu3
    • 249.11-0ubuntu3.1
    • 249.11-0ubuntu3.3
    • 249.11-0ubuntu3.4
    • 249.11-0ubuntu3.6
    • 249.11-0ubuntu3.7
    • 249.11-0ubuntu3.9
    • 249.11-0ubuntu3.10
    • 249.11-0ubuntu3.11
    • 249.11-0ubuntu3.12
    • 249.11-0ubuntu3.15
    • 249.11-0ubuntu3.16
    • 249.11-0ubuntu3.17
    • 249.11-0ubuntu3.19
    • 249.11-0ubuntu3.20
    Affected ranges
    • ECOSYSTEM: < 249.11-0ubuntu3.21

    Update to 249.11-0ubuntu3.21

  • systemd Ubuntu:24.04:LTS

    Versions
    • 253.5-1ubuntu6
    • 253.5-1ubuntu7
    • 255.2-3ubuntu2
    • 255.4-1ubuntu5
    • 255.4-1ubuntu6
    • 255.4-1ubuntu7
    • 255.4-1ubuntu8
    • 255.4-1ubuntu8.1
    • 255.4-1ubuntu8.2
    • 255.4-1ubuntu8.4
    • 255.4-1ubuntu8.5
    • 255.4-1ubuntu8.6
    • 255.4-1ubuntu8.8
    • 255.4-1ubuntu8.10
    • 255.4-1ubuntu8.11
    • 255.4-1ubuntu8.12
    • 255.4-1ubuntu8.14
    • 255.4-1ubuntu8.15
    Affected ranges
    • ECOSYSTEM: < 255.4-1ubuntu8.16

    Update to 255.4-1ubuntu8.16

  • systemd Ubuntu:25.10

    Versions
    • 257.4-1ubuntu3
    • 257.6-1ubuntu1
    • 257.7-1ubuntu1
    • 257.7-1ubuntu3
    • 257.8-0ubuntu2
    • 257.9-0ubuntu1
    • 257.9-0ubuntu2
    • 257.9-0ubuntu2.1
    • 257.9-0ubuntu2.3
    • 257.9-0ubuntu2.4
    Affected ranges
    • ECOSYSTEM: < 257.9-0ubuntu2.5

    Update to 257.9-0ubuntu2.5

Original sources

Check your server →