Back Linuxsecurity Ubuntu 25.10 Systemd Critical Arbitrary Code Exec DNS Issues USN-8402
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in systemd. Software Description: - systemd: system and service manager Details: It was discovered that systemd-nspawn incorrectly handled certain optional configuration files. A local attacker could possibly use this issue to escape to the host system and execute arbitrary code. (CVE-2026-40226) It was discovered that systemd-resolved incorrectly validated DNSSEC records for signed domains. An attacker could possibly use this issue to manipulate DNS records. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-7008)
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libsystemd0 257.9-0ubuntu2.5 libudev1 257.9-0ubuntu2.5 systemd 257.9-0ubuntu2.5 udev 257.9-0ubuntu2.5 Ubuntu 24.04 LTS libsystemd0 255.4-1ubuntu8.16 libudev1 255.4-1ubuntu8.16 systemd 255.4-1ubuntu8.16 udev 255.4-1ubuntu8.16 Ubuntu 22.04 LTS libnss-resolve 249.11-0ubuntu3.21 libsystemd0 249.11-0ubuntu3.21 libudev1 249.11-0ubuntu3.21 systemd 249.11-0ubuntu3.21 udev 249.11-0ubuntu3.21 After a standard system update you need to reboot your computer to make all the necessary changes.
Ubuntu Security Notice USN-8402-1
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
