kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

Moderate: Red Hat Security Advisory: kbd security update

An update for kbd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...

Rocky Linux 9 [CIQ] Security Update: kbd / kbd-debuginfo / kbd-debugsource / kbd-legacy / kbd-misc (crlsa-2026_57610)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202657610 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

Rocky Linux 10.2 [CIQ] Security Update: kbd / kbd-debuginfo / kbd-debugsource / kbd-legacy / kbd-misc (crlsa-2026_57597)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202657597 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

AlmaLinux 9.2 [TuxCare] Security Update: kbd / kbd-legacy / kbd-misc (ALMALINUX9.2:CLSA-2026:1788600455)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788600455 advisory. - openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the...

Rocky Linux 9.6 [TuxCare] Security Update: kbd / kbd-legacy / kbd-misc (ALMALINUX9.6:CLSA-2026:1788265535)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788265535 advisory. - openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the...

AlmaLinux 9.6 [TuxCare] Security Update: kbd / kbd-legacy / kbd-misc (ALMALINUX9.6:CLSA-2026:1788265535)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788265535 advisory. - openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the...

openSUSE 16 Security Update : kbd (openSUSE-SU-2026:21939-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21939-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that...

Security update for kbd (important)

openSUSE security update: security update for kbd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21939-1 Rating: important References: bsc1275441 Cross-References: CVE-2026-72693 CVSS scores: CVE-2026-72693 SUSE : 7.8...

Updated kbd packages fix a security vulnerability

Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login. CVE-2026-72693...

MGASA-2026-0444 Updated kbd packages fix a security vulnerability

Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login. CVE-2026-72693...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kbd (UTSA-2026-124468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124468 advisory. openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage,...

SUSE-SU-2026:23911-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

SUSE-SU-2026:23893-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

OPENSUSE-SU-2026:21939-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

SUSE SLED15 / SLES15 Security Update : kbd (SUSE-SU-2026:4211-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4211-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect...

SUSE SLES15 Security Update : kbd (SUSE-SU-2026:4207-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4207-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner...

Security update for kbd

This update for kbd fixes the following issue: CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:4211-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...