USN-8626-1: systemd vulnerabilities

Publication date

10 August 2026

Overview

Several security issues were fixed in systemd.


Packages

  • systemd - system and service manager

Details

It was discovered that systemd-homed did not properly verify the signature
of home records. A local attacker could possibly use this issue to add
arbitrary system groups to a logged-in user and gain elevated privileges.
(CVE-2026-16742)

It was discovered that systemd-machined incorrectly handled certain polkit
authorization checks. A local attacker could possibly use this issue to
terminate arbitrary processes, including privileged ones. This issue only
affected Ubuntu 26.04 LTS. (CVE-2026-15060)

It was discovered that systemd-oomd did not properly validate certain IPC
requests. A local attacker could possibly use this issue to terminate
arbitrary processes. (CVE-2026-15059)

It was discovered that systemd-homed did not properly verify the signature
of home records. A local attacker could possibly use this issue to add
arbitrary system groups to a logged-in user and gain elevated privileges.
(CVE-2026-16742)

It was discovered that systemd-machined incorrectly handled certain polkit
authorization checks. A local attacker could possibly use this issue to
terminate arbitrary processes, including privileged ones. This issue only
affected Ubuntu 26.04 LTS. (CVE-2026-15060)

It was discovered that systemd-oomd did not properly validate certain IPC
requests. A local attacker could possibly use this issue to terminate
arbitrary processes. (CVE-2026-15059)

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
26.04 LTS resolute systemd –  259.5-0ubuntu3.4
systemd-homed –  259.5-0ubuntu3.4
systemd-oomd –  259.5-0ubuntu3.4
24.04 LTS noble systemd –  255.4-1ubuntu8.17
systemd-homed –  255.4-1ubuntu8.17
systemd-oomd –  255.4-1ubuntu8.17
22.04 LTS jammy systemd –  249.11-0ubuntu3.22
systemd-oomd –  249.11-0ubuntu3.22

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›