CVE-2026-15060

A flaw was found in systemd-machined. When systemd-machined is running on a desktop system, an unprivileged user logged into a desktop graphical session can terminate arbitrary processes, including privileged ones. This could lead to a denial of service or potentially allow for privilege escalation.

Red Hat products are not affected by this vulnerability. The flaw requires systemd v259 or later (v258 with custom polkit policy). Red Hat Enterprise Linux ships systemd versions well below this threshold (RHEL 7: v219, RHEL 8: v239, RHEL 9: v252, RHEL 10: v257).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.