PT-2026-31935 · Systemd+2 · Systemd-Nspawn+2

CVE-2026-40226 · Publicado 2026-04-10 · Atualizado 2026-07-16

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.4

Média

Vetor base

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas systemd versões 233 a 259

Descrição Uma falha no nspawn permite que ocorra uma ação de escape para o host por meio do uso de um arquivo de configuração opcional manipulado.

Recomendações Atualize para a versão 260.

Exploit

Correção

Enumeração de Fraquezas

CWE-348

Identificadores relacionados

CVE-2026-40226

ECHO-918A-FD9A-B2CD

GHSA-9MJ4-RRC3-GJCX

OESA-2026-2277

OESA-2026-2278

OESA-2026-2279

OESA-2026-2280

OESA-2026-2358

RHSA-2026:7299

SUSE-SU-2026:22736-1

SUSE-SU-2026:2785-1

SUSE-SU-2026:2809-1

USN-8402-1

Produtos afetados

Linuxmint

Ubuntu

Systemd-Nspawn

Referências · 37

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40226.json · Exploit
• https://github.com/systemd/systemd/security/advisories/GHSA-9mj4-rrc3-gjcx · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2280 · Nota
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2279 · Nota
• https://bugzilla.suse.com/1267644 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2026:2785-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-40226 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2026:2809-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-40226 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2026/suse-su-20262785-1 · Nota
• https://osv.dev/vulnerability/OESA-2026-2358 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-40226 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-40226 · Nota
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2277 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2026:22736-1 · Aviso do Fabricante