Description
The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kbd | 2.0.3-1.5 | openSUSE-SU-2024:10008-1 |
Advisories 1
- openSUSE-SU-2024:10008-1 kbd-2.0.3-1.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026