Summary
libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.
Security Fix(es):
* libinput: local privilege escalation via crafted uinput devices (CVE-2026-50292)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | libinput | 0:1.30.1-2.el10_2 |
Vulnerabilities 1
-
High 7.4
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev propert…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2485390