Summary
[2.0.4-11.1]
- Fix CVE-2026-72693: openvt -u process matching more conservative
Resolves: RHEL-235979
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | kbd | 0:2.0.4-11.el8_10.1 |
| Oracle Linux · 8 | kbd-legacy | 0:2.0.4-11.el8_10.1 |
| Oracle Linux · 8 | kbd-misc | 0:2.0.4-11.el8_10.1 |
Vulnerabilities 1
-
High 7.8
Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login
`openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged context. In the documented `kbrequest`/init usage, the ownership test in `authenticate_user()` relies on `stat("/proc/<pid>/fd/0")`. `stat(…