RHSA-2026:7299MediumCVSS 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
April 9, 2026
Last Modified
June 2, 2026

🔗 CVE IDs covered (8)

CVE-2026-4105 →CVE-2026-29111 →CVE-2026-40223 →CVE-2026-40224 →CVE-2026-40225 →CVE-2026-40226 →CVE-2026-40227 →CVE-2026-40228 →

📋 Description

CVE-2026-4105 — systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method CVE-2026-29111 — systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data CVE-2026-40223 — systemd: systemd: Local unprivileged user can cause Denial of Service CVE-2026-40224 — systemd: systemd-machined: Local privilege escalation via varlink CVE-2026-40225 — systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output CVE-2026-40226 — systemd: systemd nspawn: Escape-to-host action via crafted config file CVE-2026-40227 — systemd: systemd: Denial of Service via malicious IPC API call with null element CVE-2026-40228 — systemd: systemd-journald: Unintended output to user terminals via logger command

🔗 References (12)