========================================================================== Ubuntu Security Notice USN-8626-1 August 10, 2026
systemd vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in systemd. Software Description: - systemd: system and service manager Details: It was discovered that systemd-homed did not properly verify the signature of home records. A local attacker could possibly use this issue to add arbitrary system groups to a logged-in user and gain elevated privileges. (CVE-2026-16742) It was discovered that systemd-machined incorrectly handled certain polkit authorization checks. A local attacker could possibly use this issue to terminate arbitrary processes, including privileged ones. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-15060) It was discovered that systemd-oomd did not properly validate certain IPC requests. A local attacker could possibly use this issue to terminate arbitrary processes. (CVE-2026-15059) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS systemd 259.5-0ubuntu3.4 systemd-homed 259.5-0ubuntu3.4 systemd-oomd 259.5-0ubuntu3.4 Ubuntu 24.04 LTS systemd 255.4-1ubuntu8.17 systemd-homed 255.4-1ubuntu8.17 systemd-oomd 255.4-1ubuntu8.17 Ubuntu 22.04 LTS systemd 249.11-0ubuntu3.22 systemd-oomd 249.11-0ubuntu3.22 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8626-1 CVE-2026-15059, CVE-2026-15060, CVE-2026-16742 Package Information: https://launchpad.net/ubuntu/+source/systemd/259.5-0ubuntu3.4 https://launchpad.net/ubuntu/+source/systemd/255.4-1ubuntu8.17 https://launchpad.net/ubuntu/+source/systemd/249.11-0ubuntu3.22
signature.asc
Description: OpenPGP digital signature
