CVE-2026-40225
CVE-2026-40225
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.
CVSS 6.4 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
systemd
- Versions
- ≥ 0, < 260: Affected (custom)
Update to 260
systemd Debian:12
- Versions
- 252.11-1
- 252.11-1~deb12u1
- 252.12-1~deb12u1
- 252.14-1~deb12u1
- 252.16-1~deb12u1
- 252.17-1~deb12u1
- 252.18-1~deb12u1
- 252.19-1~deb12u1
- 252.20-1~deb12u1
- 252.21-1~deb12u1
- 252.22-1~deb12u1
- 252.23-1~deb12u1
- 252.24-1~deb12u1
- 252.25-1~deb12u1
- 252.26-1~deb12u1
- 252.26-1~deb12u2
- 252.26-1~deb12u2~bpo11+1
- 252.27-1~deb12u1
- 252.28-1~deb12u1
- 252.29-1~deb12u1
- 252.29-1~deb12u1~bpo11+1
- 252.30-1~deb12u1
- 252.30-1~deb12u2
- 252.31-1~deb12u1
- 252.32-1~deb12u1
- 252.33-1~deb12u1
- 252.36-1~deb12u1
- 252.38-1~deb12u1
- 252.39-1~deb12u1
- 252.6-1
- 252.6-1+loong64
- Affected ranges
- ECOSYSTEM: < 252.39-1~deb12u2
Update to 252.39-1~deb12u2
systemd Debian:13
- Versions
- 257.7-1
- 257.8-1~deb13u1
- 257.8-1~deb13u2
- 257.9-1~deb13u1
- Affected ranges
- ECOSYSTEM: < 257.13-1~deb13u1
Update to 257.13-1~deb13u1
systemd Debian:14
- Versions
- 257.13-1~deb13u1
- 257.7-1
- 257.8-1~deb13u1
- 257.8-1~deb13u2
- 257.9-1~deb13u1
- 258-1
- 258.1-1
- 258.1-2
- 258~rc1-1
- 258~rc2-1
- 258~rc2-2
- 258~rc3-1
- 258~rc4-1
- 259-1
- 259.1-1
- 259~rc1-1
- 259~rc2-1
- 259~rc3-1
- 260~rc1-1
- 260~rc1-2
- 260~rc2-1
- 260~rc3-1
- Affected ranges
- ECOSYSTEM: < 260~rc4-1
Update to 260~rc4-1
systemd Ubuntu:Pro:20.04:LTS
- Versions
- 242-7ubuntu3
- 243-2ubuntu1
- 243-3ubuntu1
- 244-3ubuntu1
- 244.1-0ubuntu2
- 244.1-0ubuntu3
- 244.2-1ubuntu1
- 244.3-1ubuntu1
- 245.2-1ubuntu1
- 245.2-1ubuntu2
- 245.4-2ubuntu1
- 245.4-4ubuntu1
- 245.4-4ubuntu3
- 245.4-4ubuntu3.1
- 245.4-4ubuntu3.2
- 245.4-4ubuntu3.3
- 245.4-4ubuntu3.4
- 245.4-4ubuntu3.5
- 245.4-4ubuntu3.6
- 245.4-4ubuntu3.7
- 245.4-4ubuntu3.10
- 245.4-4ubuntu3.11
- 245.4-4ubuntu3.13
- 245.4-4ubuntu3.14
- 245.4-4ubuntu3.15
- 245.4-4ubuntu3.16
- 245.4-4ubuntu3.17
- 245.4-4ubuntu3.18
- 245.4-4ubuntu3.19
- 245.4-4ubuntu3.20
- 245.4-4ubuntu3.21
- 245.4-4ubuntu3.22
- 245.4-4ubuntu3.23
- 245.4-4ubuntu3.24
- 245.4-4ubuntu3.24+esm1
- Affected ranges
- ECOSYSTEM: < 245.4-4ubuntu3.24+esm3
Update to 245.4-4ubuntu3.24+esm3
systemd Ubuntu:22.04:LTS
- Versions
- 248.3-1ubuntu8
- 249.5-2ubuntu1
- 249.5-2ubuntu2
- 249.5-2ubuntu3
- 249.5-2ubuntu4
- 249.9-0ubuntu2
- 249.10-0ubuntu1
- 249.10-0ubuntu2
- 249.11-0ubuntu1
- 249.11-0ubuntu2
- 249.11-0ubuntu3
- 249.11-0ubuntu3.1
- 249.11-0ubuntu3.3
- 249.11-0ubuntu3.4
- 249.11-0ubuntu3.6
- 249.11-0ubuntu3.7
- 249.11-0ubuntu3.9
- 249.11-0ubuntu3.10
- 249.11-0ubuntu3.11
- 249.11-0ubuntu3.12
- 249.11-0ubuntu3.15
- 249.11-0ubuntu3.16
- 249.11-0ubuntu3.17
- Affected ranges
- ECOSYSTEM: < 249.11-0ubuntu3.19
Update to 249.11-0ubuntu3.19
systemd Ubuntu:24.04:LTS
- Versions
- 253.5-1ubuntu6
- 253.5-1ubuntu7
- 255.2-3ubuntu2
- 255.4-1ubuntu5
- 255.4-1ubuntu6
- 255.4-1ubuntu7
- 255.4-1ubuntu8
- 255.4-1ubuntu8.1
- 255.4-1ubuntu8.2
- 255.4-1ubuntu8.4
- 255.4-1ubuntu8.5
- 255.4-1ubuntu8.6
- 255.4-1ubuntu8.8
- 255.4-1ubuntu8.10
- 255.4-1ubuntu8.11
- 255.4-1ubuntu8.12
- Affected ranges
- ECOSYSTEM: < 255.4-1ubuntu8.14
Update to 255.4-1ubuntu8.14
systemd Ubuntu:25.10
- Versions
- 257.4-1ubuntu3
- 257.6-1ubuntu1
- 257.7-1ubuntu1
- 257.7-1ubuntu3
- 257.8-0ubuntu2
- 257.9-0ubuntu1
- 257.9-0ubuntu2
- 257.9-0ubuntu2.1
- Affected ranges
- ECOSYSTEM: < 257.9-0ubuntu2.3
Update to 257.9-0ubuntu2.3