6.4

CVE-2026-40226

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Systemd Project ≫ Systemd Version >= 233 < 257.12
Systemd Project ≫ Systemd Version >= 258 < 258.6
Systemd Project ≫ Systemd Version >= 259 < 259.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.001
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
MITRE 6.4 0.5 5.9
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-348 Use of Less Trusted Source

The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

https://github.com/systemd/systemd/security/advisories/GHSA-9mj4-rrc3-gjcx
Vendor Advisory