CVE-2026-40225
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.
Original description
The description as published by the source.
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-40225 systemd Fixed in: 247.3-7+deb11u8
- Ubuntu UBUNTU-CVE-2026-40225 systemd
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov