Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 457
Alerts This Week
Warning Icon 1 457

SUSE 2026 systemd Moderate Escape-to-Host Vulnerability SUSE-SU-2026-3244-1

suse
Calendar Grey July 27, 2026
Scroller Suse
An essential update for SUSE addressing a moderate risk vulnerability in systemd, ensuring system integrity and security.
A security update for systemd addresses CVE-2026-40226 and several bug fixes across various SUSE products, requiring a system reboot after installation.

Summary

## This update for systemd fixes the following issues: Security issues fixed: * CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: * Fix soft reboot not restarting user services with default.target (bsc#1262305). * Import commit e46e1952d5 (bsc#1267647 bsc#1262305 bsc#1267644). * Import commit 429043ca9a (bsc#1261982 bsc#1261983). * Import commit 58e5d2e21e (bsc#1261982). * Import commit 4bd91117cc (bsc#1261983).

Topics%20covered

Topics Covered

security advisory moderate SuSE systemd escape-to-host malformed config

References

* bsc#1261400

* bsc#1261982

* bsc#1261983

* bsc#1262305

* bsc#1267644

* bsc#1267647

Cross-

* CVE-2026-40226

CVSS scores:

* CVE-2026-40226 ( SUSE ): 7.1

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-40226 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-40226 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* Basesystem Module 15-SP7

* openSUSE Leap 15.6

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

* SUSE Package Hub 15 15-SP7

An update that solves one vulnerability and has five security fixes can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2026-40226.html

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3244-1
Release Date: 2026-07-24T13:11:41Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate SuSE systemd escape-to-host malformed config

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.