Upstream information

CVE-2026-40225 at MITRE

Description

In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.

SUSE information

Overall state of this security issue: Does not affect SUSE products

SUSE Bugzilla entry: 1259697 [IN_PROGRESS]

No SUSE Security Announcements cross referenced.

SUSE Timeline for this CVE

CVE page created: Mon Mar 16 11:45:14 2026
CVE page last modified: Fri May 8 12:08:58 2026