Attestkeep
Sprache: Deutsch
Loslegen

Schwachstellen / CVE-2026-50292

kritisch

CVE-2026-50292

libinput: local privilege escalation via crafted uinput devices

Veröffentlicht Geändert CWE 93
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.

Einstufung nach Quelle

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Amazon (hoch), Azure Linux (hoch), Red Hat (mittel), AlmaLinux (mittel), Oracle (mittel), Rocky Linux (mittel), Ubuntu (mittel).

Beschreibung

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

Betroffene Pakete und behobene Versionen

QuellePaketBehoben in
alma 10libinput, libinput-devel, libinput-utils1.30.1-2.el10_2
amazon linux 2libinput, libinput-debuginfo, libinput-devel1.8.4-2.amzn2.0.1
amazon linux 2023libinput, libinput-debuginfo, libinput-debugsource und 5 weitere1.26.2-1.amzn2023.0.2
Azure Linux 3.0libinput0:1.25.0-2.azl3
debian 11libinput1.16.4-3+deb11u1
debian 12libinput1.22.1-1+deb12u1
debian 13libinput1.28.1-1+deb13u1
debian 14libinput1.31.3-1
echolibinput1.22.1-1+deb12u1
rapidfort alma 10libinput, libinput-devel, libinput-utils1.30.1-2.el10_2
rapidfort alma 8libinput, libinput-devel, libinput-utilskein Fix angegeben
rapidfort alma 9libinput, libinput-devel, libinput-utilskein Fix angegeben
Alle 55 Einträge aus 28 Quellen zeigen
QuellePaketBehoben in
alma 10libinput1.30.1-2.el10_2
alma 10libinput-devel1.30.1-2.el10_2
alma 10libinput-utils1.30.1-2.el10_2
amazon linux 2libinput1.8.4-2.amzn2.0.1
amazon linux 2libinput-debuginfo1.8.4-2.amzn2.0.1
amazon linux 2libinput-devel1.8.4-2.amzn2.0.1
amazon linux 2023libinput1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-debuginfo1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-debugsource1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-devel1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-test1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-test-debuginfo1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-utils1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-utils-debuginfo1.26.2-1.amzn2023.0.2
Azure Linux 3.0libinput0:1.25.0-2.azl3
debian 11libinput1.16.4-3+deb11u1
debian 12libinput1.22.1-1+deb12u1
debian 13libinput1.28.1-1+deb13u1
debian 14libinput1.31.3-1
echolibinput1.22.1-1+deb12u1
rapidfort alma 10libinput1.30.1-2.el10_2
rapidfort alma 10libinput-devel1.30.1-2.el10_2
rapidfort alma 10libinput-utils1.30.1-2.el10_2
rapidfort alma 8libinputkein Fix angegeben
rapidfort alma 8libinput-develkein Fix angegeben
rapidfort alma 8libinput-utilskein Fix angegeben
rapidfort alma 9libinputkein Fix angegeben
rapidfort alma 9libinput-develkein Fix angegeben
rapidfort alma 9libinput-utilskein Fix angegeben
rapidfort amazon linux 2023libinput1.26.2-1.amzn2023.0.2
rapidfort amazon linux 2023libinput-devel1.26.2-1.amzn2023.0.2
rapidfort amazon linux 2023libinput-test1.26.2-1.amzn2023.0.2
rapidfort amazon linux 2023libinput-utils1.26.2-1.amzn2023.0.2
rapidfort debian 12libinput0:1.28.1-1+deb13u1, 0:1.31.3-1
rapidfort debian 13libinput0:1.28.1-1+deb13u1, 0:1.31.3-1
rapidfort Oracle Linux 10libinput0:1.30.1-2.el10_2
rapidfort Oracle Linux 10libinput-utils0:1.30.1-2.el10_2
rapidfort Oracle Linux 9libinputkein Fix angegeben
rapidfort Oracle Linux 9libinput-utilskein Fix angegeben
rapidfort rocky 8libinputkein Fix angegeben
rapidfort rocky 8libinput-utilskein Fix angegeben
rapidfort rocky 9libinputkein Fix angegeben
rapidfort rocky 9libinput-utilskein Fix angegeben
rapidfort ubuntu 20.04libinput0:1.25.0-1ubuntu3.7
rapidfort ubuntu 22.04libinput0:1.25.0-1ubuntu3.7
rapidfort ubuntu 24.04libinput0:1.25.0-1ubuntu3.7
Red Hatlibinputkein Fix angegeben
Red Hatlibinput-develkein Fix angegeben
Red Hatlibinput-utilskein Fix angegeben
rocky 10libinput0.0.0
rocky 10libinput-utils0.0.0
ubuntu 20.04-ESMlibinput1.15.5-1ubuntu0.3+esm1
ubuntu 22.04libinput1.20.0-1ubuntu0.4
ubuntu 24.04libinput1.25.0-1ubuntu3.7
ubuntu 26.04libinput1.31.1-1ubuntu1.2

Referenzen

Alle 17 Referenzen

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.