CVE-2026-40225 - systemd/systemd
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.
CWE-669 / CVSS 6.4 (MEDIUM)
Evidence
- fix verified present in fork base
History
- 2026-10-28: merged - remediated upstream, in fork base