Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2026-50292

critical

CVE-2026-50292

libinput: local privilege escalation via crafted uinput devices

Published Modified CWE 93
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Amazon (high), Azure Linux (high), Red Hat (medium), AlmaLinux (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).

Description

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

Affected packages and fixed versions

SourcePackageFixed in
alma 10libinput, libinput-devel, libinput-utils1.30.1-2.el10_2
amazon linux 2libinput, libinput-debuginfo, libinput-devel1.8.4-2.amzn2.0.1
amazon linux 2023libinput, libinput-debuginfo, libinput-debugsource and 5 more1.26.2-1.amzn2023.0.2
Azure Linux 3.0libinput0:1.25.0-2.azl3
debian 11libinput1.16.4-3+deb11u1
debian 12libinput1.22.1-1+deb12u1
debian 13libinput1.28.1-1+deb13u1
debian 14libinput1.31.3-1
echolibinput1.22.1-1+deb12u1
rapidfort alma 10libinput, libinput-devel, libinput-utils1.30.1-2.el10_2
rapidfort alma 8libinput, libinput-devel, libinput-utilsno fix listed
rapidfort alma 9libinput, libinput-devel, libinput-utilsno fix listed
Show all 55 entries from 28 sources
SourcePackageFixed in
alma 10libinput1.30.1-2.el10_2
alma 10libinput-devel1.30.1-2.el10_2
alma 10libinput-utils1.30.1-2.el10_2
amazon linux 2libinput1.8.4-2.amzn2.0.1
amazon linux 2libinput-debuginfo1.8.4-2.amzn2.0.1
amazon linux 2libinput-devel1.8.4-2.amzn2.0.1
amazon linux 2023libinput1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-debuginfo1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-debugsource1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-devel1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-test1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-test-debuginfo1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-utils1.26.2-1.amzn2023.0.2
amazon linux 2023libinput-utils-debuginfo1.26.2-1.amzn2023.0.2
Azure Linux 3.0libinput0:1.25.0-2.azl3
debian 11libinput1.16.4-3+deb11u1
debian 12libinput1.22.1-1+deb12u1
debian 13libinput1.28.1-1+deb13u1
debian 14libinput1.31.3-1
echolibinput1.22.1-1+deb12u1
rapidfort alma 10libinput1.30.1-2.el10_2
rapidfort alma 10libinput-devel1.30.1-2.el10_2
rapidfort alma 10libinput-utils1.30.1-2.el10_2
rapidfort alma 8libinputno fix listed
rapidfort alma 8libinput-develno fix listed
rapidfort alma 8libinput-utilsno fix listed
rapidfort alma 9libinputno fix listed
rapidfort alma 9libinput-develno fix listed
rapidfort alma 9libinput-utilsno fix listed
rapidfort amazon linux 2023libinput1.26.2-1.amzn2023.0.2
rapidfort amazon linux 2023libinput-devel1.26.2-1.amzn2023.0.2
rapidfort amazon linux 2023libinput-test1.26.2-1.amzn2023.0.2
rapidfort amazon linux 2023libinput-utils1.26.2-1.amzn2023.0.2
rapidfort debian 12libinput0:1.28.1-1+deb13u1, 0:1.31.3-1
rapidfort debian 13libinput0:1.28.1-1+deb13u1, 0:1.31.3-1
rapidfort Oracle Linux 10libinput0:1.30.1-2.el10_2
rapidfort Oracle Linux 10libinput-utils0:1.30.1-2.el10_2
rapidfort Oracle Linux 9libinputno fix listed
rapidfort Oracle Linux 9libinput-utilsno fix listed
rapidfort rocky 8libinputno fix listed
rapidfort rocky 8libinput-utilsno fix listed
rapidfort rocky 9libinputno fix listed
rapidfort rocky 9libinput-utilsno fix listed
rapidfort ubuntu 20.04libinput0:1.25.0-1ubuntu3.7
rapidfort ubuntu 22.04libinput0:1.25.0-1ubuntu3.7
rapidfort ubuntu 24.04libinput0:1.25.0-1ubuntu3.7
Red Hatlibinputno fix listed
Red Hatlibinput-develno fix listed
Red Hatlibinput-utilsno fix listed
rocky 10libinput0.0.0
rocky 10libinput-utils0.0.0
ubuntu 20.04-ESMlibinput1.15.5-1ubuntu0.3+esm1
ubuntu 22.04libinput1.20.0-1ubuntu0.4
ubuntu 24.04libinput1.25.0-1ubuntu3.7
ubuntu 26.04libinput1.31.1-1ubuntu1.2

References

All 17 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.