CVE-2026-74676

Summary

In the Linux kernel, the following vulnerability has been resolved:

vt: add permission check for KDSKBMETA ioctl

KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt_k_ioctl() enforce, allowing a process to change meta mode on a non-controlling console without authorization.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9f8cbaf4b774694dcc292e60509762483ebfd9aeaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ddc4a8303347114e945b9e6e81b81d77855f7358affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1c5b67a1e2cb7d78dab321280f330b056e3bf437affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d8ead5083b203d12b8319e7cb29cc6b8836e813faffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4671c3b79e337bbae28c2d79023dc642df012bdeaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a1c31e026c93e378e297a8df8328983d3013a59faffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7bf32337a7103ccb686cbd240324bf26225ef2d6affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a7ad0034453ba4c353f9b8f810ee2569de33d283affected
LinuxLinux0 < 5.10.265affected
LinuxLinux0 < 5.15.216affected
LinuxLinux0 < 6.1.183affected
LinuxLinux0 < 6.6.152affected
LinuxLinux0 < 6.12.104affected
LinuxLinux0 < 6.18.45affected
LinuxLinux0 < 7.1.9affected
LinuxLinux5.10.265 <= 5.10.*unaffected
LinuxLinux5.15.216 <= 5.15.*unaffected
LinuxLinux6.1.183 <= 6.1.*unaffected
LinuxLinux6.6.152 <= 6.6.*unaffected
LinuxLinux6.12.104 <= 6.12.*unaffected
LinuxLinux6.18.45 <= 6.18.*unaffected
LinuxLinux7.1.9 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References