RHSA-2026:7299MediumCVSS 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
April 9, 2026
Last Modified
September 8, 2026

🔗 CVE IDs covered (8)

CVE-2026-40225 →CVE-2026-40226 →CVE-2026-40227 →CVE-2026-40228 →CVE-2026-4105 →CVE-2026-29111 →CVE-2026-40223 →CVE-2026-40224 →

📋 Description

CVE-2026-4105 — systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method CVE-2026-29111 — systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data CVE-2026-40223 — systemd: systemd: Local unprivileged user can cause Denial of Service CVE-2026-40224 — systemd: systemd-machined: Local privilege escalation via varlink CVE-2026-40225 — systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output CVE-2026-40226 — systemd: systemd nspawn: Escape-to-host action via crafted config file CVE-2026-40227 — systemd: systemd: Denial of Service via malicious IPC API call with null element CVE-2026-40228 — systemd: systemd-journald: Unintended output to user terminals via logger command

🎯 Affected products5

  • Red Hat Hardened Images
  • systemd-main@aarch64 as a component of Red Hat Hardened Images
  • systemd-main@noarch as a component of Red Hat Hardened Images
  • systemd-main@src as a component of Red Hat Hardened Images
  • systemd-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: This issue can be mitigated by changing the permission of the varsock file located at: ~~~ /run/systemd/io.systemd.Manager ~~~ to be accessible only by trusted or privileged users.

🔗 References (12)