# CVE-2026-15060: systemd: When systemd-machined >= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is runnin... CVE-2026-15060 is fixed in 29 products on 1 platform, first by libnss-myhostname 259.5-0ubuntu3.4, released August 9, 2026. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2026-15060 - Priority: Routine - CVSS: 4.7 (medium) - EPSS: 0.0008 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Aug 9, 2026 ## Description When systemd-machined >= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless unprivileged access is granted for the `register-machine` polkit action via a local, custom policy config file - versions older than v258 are not affected - unrelated to the systemd service manager (pid 1 or user session managers) - systemd-machined is not typically installed by default, and is typically in an optional, separate package (e.g.: systemd-container) - terminal-only or remote sessions (e.g.: ssh) are not affected ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libnss-myhostname Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [libnss-myhostname 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libnss-myhostname-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | libnss-mymachines Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [libnss-mymachines 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libnss-mymachines-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | libnss-resolve Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [libnss-resolve 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libnss-resolve-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | libnss-systemd Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [libnss-systemd 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libnss-systemd-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | libpam-systemd Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [libpam-systemd 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libpam-systemd-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | libsystemd-shared Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [libsystemd-shared 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libsystemd-shared-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | libsystemd0 Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [libsystemd0 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libsystemd0-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | libudev1 Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [libudev1 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libudev1-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd Debian 14 | 261.2-1 | [DEBIAN-CVE-2026-15060](https://patchblox.com/security/data/fix/linux/debian-cve-2026-15060.md) | Aug 17, 2026 | | Linux | systemd Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-boot Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-boot 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-boot-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-boot-efi Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-boot-efi 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-boot-efi-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-boot-tools Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-boot-tools 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-boot-tools-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-container Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-container 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-container-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-coredump Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-coredump 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-coredump-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-cryptsetup Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-cryptsetup 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-cryptsetup-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-homed Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-homed 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-homed-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-journal-remote Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-journal-remote 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-journal-remote-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-oomd Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-oomd 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-oomd-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-repart Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-repart 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-repart-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-resolved Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-resolved 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-resolved-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-standalone-shutdown Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-standalone-shutdown 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-standalone-shutdown-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-standalone-sysusers Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-standalone-sysusers 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-standalone-sysusers-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-standalone-tmpfiles Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-standalone-tmpfiles 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-standalone-tmpfiles-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-sysv Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-sysv 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-sysv-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-tests Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-tests 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-tests-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-timesyncd Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-timesyncd 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-timesyncd-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-ukify Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-ukify 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-ukify-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | systemd-userdbd Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [systemd-userdbd 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-systemd-userdbd-259.5-0ubuntu3.4.md) | Aug 9, 2026 | | Linux | udev Ubuntu 26.04.1 LTS (resolute) | 259.5-0ubuntu3.4 | [udev 259.5-0ubuntu3.4](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-udev-259.5-0ubuntu3.4.md) | Aug 9, 2026 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.