CVE-2026-40227

Description

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.

PUBLISHED Reserved 2026-04-10 | Published 2026-04-10 | Updated 2026-04-14 | Assigner mitre

Problem types

CWE-1025 Comparison Using Wrong Factors

Product status

References

github.com/...ystemd/security/advisories/GHSA-848h-497j-8vjq

cve.org (CVE-2026-40227)

nvd.nist.gov (CVE-2026-40227)

Download JSON