PT-2026-31934 · Systemd · Systemd

Aydenbottos · Published 2026-04-10 · Updated 2026-05-12 · CVE-2026-40225

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions systemd versions prior to 260

Description In udev, local root execution can occur through the use of malicious hardware devices and unsanitized kernel output.

Recommendations Update to version 260 or later.

Fix

Weakness Enumeration

CWE-669

Related Identifiers

CVE-2026-40225

ECHO-5372-36F1-2A63

RHSA-2026:7299

Affected Products

Systemd

References · 9

• https://github.com/systemd/systemd/security/advisories/GHSA-vpfq-8p5f-jcqx · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2026-40225 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2026-40225 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-40225 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40225 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-40225 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40225 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-40225 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-40225 · Security Note