CVE-2026-40225

Medium

In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.

mitre·CWE-669·Published 2026-04-10

CVSS

6.4

EPSS

0.00

KEV

Exploits

cve.orgen

123 chars

In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.

NVDen

123 chars

In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.4	—	—	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	6.4	0.5	5.9	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H