Red Hat issued a security advisory (RHSA-2026:7299) addressing multiple vulnerabilities in Red Hat Hardened Images RPMs, including CVE-2026-4105 and seven related CVEs. Among these, CVE-2026-40228 is a flaw in systemd-journald where enabling ForwardToWall=yes allows a local user running 'logger -p emerg' to cause systemd-journald to send ANSI escape sequences to terminals of other users, potentially causing unintended output. The advisory references several CWEs related to improper access control, output neutralization, and memory issues. No explicit CVSS scores are provided by Red Hat, and no fixed versions or patch links are detailed in the advisory. The update is available via Red Hat Hardened Images RPMs, with further details at https://images.redhat.com/. No known exploits in the wild have been reported.

The impact includes potential unintended output appearing on terminals of other users due to ANSI escape sequences sent by systemd-journald when ForwardToWall=yes is enabled. This may cause confusion or minor disruption but does not affect confidentiality or availability. The integrity impact is low as per Red Hat's assessment. No known active exploitation has been reported. Other included CVEs cover various security weaknesses but specific impacts are not detailed in the provided data.

Red Hat has released an update for Red Hat Hardened Images RPMs that includes fixes and enhancements addressing these vulnerabilities. Users should apply the update as per Red Hat's instructions available at https://images.redhat.com/. Since no explicit patch links or fixed versions are provided, users should consult the vendor advisory for the latest remediation guidance. No additional mitigations are specified. There are no indications that the vulnerabilities are already mitigated or require no action.