1 matches found
AZL-95928 CVE-2026-72693 affecting package kbd 2.2.0-2
openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...
7.8CVSS5.9AI score0.00107EPSS
SaveExploits0References1
20