CVE-2026-40228 - systemd/systemd
In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.
CWE-669 / CVSS 2.9 (LOW)
Evidence
- test-wall.c RED pre-fix (implicit declaration, -Werror)
- test-wall GREEN post-fix, 5 groups incl. ST sequences
- post-merge rebuild and run green on fork main
History
- 2026-10-28: fork-fixed - merged to fork main 0e00565