← Back to CVE search

CVE-2026-40227

systemd

Description

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.

CVSS 6.2EPSS 0.202%Risk 0.63
View source
Published
2026-04-10 16:16:33
Affected versions
<261
Type
Core software
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H