CVE Catalog
CVE-2026-40225
MediumSummary
In udev in systemd before version 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.
Risk Assessment
Organizations may be exposed to attacks that allow local users to gain administrator privileges by exploiting malicious hardware.
Recommendation
It is recommended to update systemd to version 260 or later and to monitor connected hardware devices for potential threats.
Original NVD description (English source)
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.