# CVE-2026-40337

## Summary

- **CVE ID:** CVE-2026-40337
- **Severity:** MEDIUM
- **CVSS Score:** 5.1 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H)
- **CWE:** CWE-283
- **Published:** Apr 17, 2026
- **Last Modified:** Apr 20, 2026

## Description

The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interact with another task's IRQ line through the __sys_int_* syscall familly. Prior to version 0.4.7, this can lead to DoS and covert-channels between this task and the outer world. A patch is available in version 0.4.7. As a workaround, reduce tasks that have the DEV and IO capability to a single one.

## Affected Products

- camelot-os — sentry-kernel (< 0.4.7)

## References

- [CNA](https://github.com/camelot-os/sentry-kernel/security/advisories/GHSA-5hgv-rg2f-79pg)
- [CNA](https://github.com/camelot-os/sentry-kernel/pull/108)
- [CNA](https://github.com/camelot-os/sentry-kernel/commit/150b7edd2c5b0da0a8baeed3135ddde613b08081)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.15%
- **EPSS Percentile:** 4.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._