Red Hat Security AdvisoryRHSA-2026:7299
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-04-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images systemd-260.1-2.1.hum1@aarch64, systemd-260.1-2.1.hum1@src, systemd-260.1-2.1.hum1@x86_64 +40
Fixes 8 records
Priority MEDIUM 64
In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00075 · Published 2026-04-10 · Fixed in 260 CWE-348
Priority MEDIUM 49
In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2026-04-10 · Fixed CWE-669
Priority LOW 33
In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.0011 · Published 2026-04-10 · Fixed in 260 CWE-863
Priority LOW 31
A flaw was found in systemd.
CVSS 3.1MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.0015 · Published 2026-03-13 · Partial fix · 260.1-2.1.hum1 CWE-284
Priority LOW 29
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.
CVSS 3.1MEDIUM 6.4· Physical · No auth · No interaction · EPSS 0.0015 · Published 2026-04-10 · Partial fix · 260 CWE-669
Priority LOW 27
In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0021 · Published 2026-04-10 · Fixed in 261 CWE-1025
Priority LOW 24
systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00126 · Published 2026-03-23 · Partial fix · 257.11, 258.5 +1 CWE-269
Priority LOW 23
In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0009 · Published 2026-04-10 · Fixed in 260 CWE-696
THREATIST.IORead the docs