CVE-2026-40337 Sentry kernel has incomplete ownership check for IRQ line manipulation
A task with DEV or IO capability can manipulate another task's IRQ lines, causing denial of service or covert channels in the Sentry kernel.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-40337?
CVE-2026-40337 is a medium-severity missing authorization vulnerability in camelot-os sentry-kernel, published on 17 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interact with another task's IRQ line through the __sys_int_* syscall familly. Prior to version 0.4.7, this can lead to DoS and covert-channels between this task and the outer world. A patch is available in version 0.4.7. As a workaround, reduce tasks that have the DEV and IO capability to a single one.
Weakness: CWE-283
Which versions are affected by CVE-2026-40337?
How do I fix CVE-2026-40337?
No fix has been published for CVE-2026-40337 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-40337 being exploited?
There is no known exploitation of CVE-2026-40337 in the wild and no public exploit code.
Sources
Also known as GHSA-5hgv-rg2f-79pg.