CVE-2026-40227 - systemd/systemd
In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.
CWE-1025 / CVSS 6.2 (MEDIUM)
Evidence
- fix verified present in fork base
History
- 2026-10-28: merged - remediated upstream, in fork base