Rocky Linux 10.2 [CIQ] Security Update: libinput / libinput-debuginfo / libinput-debugsource / etc (crlsa-2026_39296)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639296 advisory. libinput: local privilege escalation via crafted uinput devices CVE-2026-50292 Tenable has extracted the preceding description block directly from the CIQ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Input: uinput – Zero initializes uinputff UploadCompat to prevent information leakage. The struct ffeffectcompat is embedded twice within uinputff UploadCompat and contains internal padding. In particular, there is a gap after...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: uinput – fixed a circular locking dependency with ff-core A circular locking dependency warning can be triggered reproducibly when using a force-feedback gamepad with uinput for example, playing ELDEN RING under Wine with ...

Astra Linux – Vulnerability in open-vm-tools

open-vm-tools contains a file descriptor hijacking vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Input: uinput – rejects requests with an unreasonable number of slots When using uinput, the syzkaller may attempt to set up a device with a very large number of slots, leading to a memory allocation failure in inputmtinitslots...

Linux Distros Unpatched Vulnerability : CVE-2026-72241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099719 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependenc...

Moderate: Red Hat Security Advisory: libinput security update

An update for libinput is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

libinput: local privilege escalation via crafted uinput devices

A flaw was found in libinput. A local attacker with access to /dev/uinput can inject arbitrary udev properties through the libinput-device-group helper. This injection can lead to root code execution, for example, by exploiting REMOVECMD properties that are executed when a device is removed. This...

RHEL 10 : libinput (RHSA-2026:43290)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43290 advisory. libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security...

libinput security update

An update is available for libinput. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libinput is a library that handles input devices for display servers and...

RLSA-2026:39296 Moderate: libinput security update

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fixes: libinput: local privilege escalation via crafted uinput devices CVE-2026-50292 For more details about the security issues, including the impac...

RockyLinux 10 : libinput (RLSA-2026:39296)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39296 advisory. libinput: local privilege escalation via crafted uinput devices CVE-2026-50292 Tenable has extracted the preceding description block directly from the RockyLinu...

RHEL 10 : libinput (RHSA-2026:39296)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39296 advisory. libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security...

AlmaLinux 10 : libinput (ALSA-2026:39296)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39296 advisory. libinput: local privilege escalation via crafted uinput devices CVE-2026-50292 Tenable has extracted the preceding description block directly from the AlmaLinux...

Moderate: Red Hat Security Advisory: libinput security update

An update for libinput is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

ALSA-2026:39296 Moderate: libinput security update

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fixes: libinput: local privilege escalation via crafted uinput devices CVE-2026-50292 For more details about the security issues, including the impac...

Security update for libinput (important)

openSUSE security update: security update for libinput ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21091-1 Rating: important References: bsc1267852 Cross-References: CVE-2026-50265 CVE-2026-50292 CVSS scores: CVE-2026-50265 SUSE : 7...

SUSE SLES15 Security Update : libinput (SUSE-SU-2026:2530-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2530-1 advisory. This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local...

SUSE SLED15 / SLES15 Security Update : libinput (SUSE-SU-2026:2524-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2524-1 advisory. This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices ca...