Attestkeep
Dil: Türkçe
Kayıt ol

Zafiyetler / CVE-2026-50292

kritik

CVE-2026-50292

libinput: local privilege escalation via crafted uinput devices

Yayın Değişiklik CWE 93
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Amazon (yüksek), Azure Linux (yüksek), Red Hat (orta), AlmaLinux (orta), Oracle (orta), Rocky Linux (orta), Ubuntu (orta).

Açıklama

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
alma 10libinput, libinput-devel, libinput-utils1.30.1-2.el10_2
amazon linux 2libinput, libinput-debuginfo, libinput-devel1.8.4-2.amzn2.0.1
amazon linux 2023libinput, libinput-debuginfo, libinput-debugsource ve 5 tane daha1.26.2-1.amzn2023.0.2
Azure Linux 3.0libinput0:1.25.0-2.azl3
debian 11libinput1.16.4-3+deb11u1
debian 12libinput1.22.1-1+deb12u1
debian 13libinput1.28.1-1+deb13u1
debian 14libinput1.31.3-1
echolibinput1.22.1-1+deb12u1
rapidfort alma 10libinput, libinput-devel, libinput-utils1.30.1-2.el10_2
rapidfort alma 8libinput, libinput-devel, libinput-utilsdüzeltme belirtilmemiş
rapidfort alma 9libinput, libinput-devel, libinput-utilsdüzeltme belirtilmemiş
28 kaynaktaki 55 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
alma 10libinput1.30.1-2.el10_2
alma 10libinput-devel1.30.1-2.el10_2
alma 10libinput-utils1.30.1-2.el10_2
amazon linux 2libinput1.8.4-2.amzn2.0.1
amazon linux 2libinput-debuginfo1.8.4-2.amzn2.0.1
amazon linux 2libinput-devel1.8.4-2.amzn2.0.1
amazon linux 2023libinput1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-debuginfo1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-debugsource1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-devel1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-test1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-test-debuginfo1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-utils1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-utils-debuginfo1.26.2-1.amzn2023.0.2
Azure Linux 3.0libinput0:1.25.0-2.azl3
debian 11libinput1.16.4-3+deb11u1
debian 12libinput1.22.1-1+deb12u1
debian 13libinput1.28.1-1+deb13u1
debian 14libinput1.31.3-1
echolibinput1.22.1-1+deb12u1
rapidfort alma 10libinput1.30.1-2.el10_2
rapidfort alma 10libinput-devel1.30.1-2.el10_2
rapidfort alma 10libinput-utils1.30.1-2.el10_2
rapidfort alma 8libinputdüzeltme belirtilmemiş
rapidfort alma 8libinput-develdüzeltme belirtilmemiş
rapidfort alma 8libinput-utilsdüzeltme belirtilmemiş
rapidfort alma 9libinputdüzeltme belirtilmemiş
rapidfort alma 9libinput-develdüzeltme belirtilmemiş
rapidfort alma 9libinput-utilsdüzeltme belirtilmemiş
rapidfort amazon linux 2023libinput1.26.2-1.amzn2023.0.2
rapidfort amazon linux 2023libinput-devel1.26.2-1.amzn2023.0.2
rapidfort amazon linux 2023libinput-test1.26.2-1.amzn2023.0.2
rapidfort amazon linux 2023libinput-utils1.26.2-1.amzn2023.0.2
rapidfort debian 12libinput0:1.28.1-1+deb13u1, 0:1.31.3-1
rapidfort debian 13libinput0:1.28.1-1+deb13u1, 0:1.31.3-1
rapidfort Oracle Linux 10libinput0:1.30.1-2.el10_2
rapidfort Oracle Linux 10libinput-utils0:1.30.1-2.el10_2
rapidfort Oracle Linux 9libinputdüzeltme belirtilmemiş
rapidfort Oracle Linux 9libinput-utilsdüzeltme belirtilmemiş
rapidfort rocky 8libinputdüzeltme belirtilmemiş
rapidfort rocky 8libinput-utilsdüzeltme belirtilmemiş
rapidfort rocky 9libinputdüzeltme belirtilmemiş
rapidfort rocky 9libinput-utilsdüzeltme belirtilmemiş
rapidfort ubuntu 20.04libinput0:1.25.0-1ubuntu3.7
rapidfort ubuntu 22.04libinput0:1.25.0-1ubuntu3.7
rapidfort ubuntu 24.04libinput0:1.25.0-1ubuntu3.7
Red Hatlibinputdüzeltme belirtilmemiş
Red Hatlibinput-develdüzeltme belirtilmemiş
Red Hatlibinput-utilsdüzeltme belirtilmemiş
rocky 10libinput0.0.0
rocky 10libinput-utils0.0.0
ubuntu 20.04-ESMlibinput1.15.5-1ubuntu0.3+esm1
ubuntu 22.04libinput1.20.0-1ubuntu0.4
ubuntu 24.04libinput1.25.0-1ubuntu3.7
ubuntu 26.04libinput1.31.1-1ubuntu1.2

Referanslar

17 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.