CVE-2026-16742
ADVISORY - debianSummary
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user
- systemd 261.2-1 [trixie] - systemd (Minor issue) [bookworm] - systemd (Minor issue) https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv Fixed by: https://github.com/systemd/systemd/commit/d392d17143423e7af0cdb5bd0f64b43da8952662 (v261.2) Fixed by: https://github.com/systemd/systemd/commit/a7bce5b2052bdb098ad0729768c72e1df9a86adc (v261.2) Fixed by: https://github.com/systemd/systemd/commit/8735bb63b7902b6824f4d171bca994252eb04a71 (v258.10) Fixed by: https://github.com/systemd/systemd/commit/04cba0a78da9d161c2f6426751d0460fb8193263 (v258.10)
EPSS Score: 0.00057 (0.000)
Common Weakness Enumeration (CWE)
Debian
CREATED
UPDATED
ADVISORY IDCVE-2026-16742
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| debian/systemd | deb | debian | 12 | >0 | Not yet available |
| debian/systemd | deb | debian | 13 | >0 | Not yet available |
| debian/systemd | deb | debian | 14 | <261.2-1 | 261.2-1 |
| debian/systemd | deb | debian | unstable | <261.2-1 | 261.2-1 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CVSS SCORE
6.7mediumUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-16742
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-