vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-74676

vt: add permission check for KDSKBMETA ioctl

N/A
Published: August 22, 2026 at 03:32 PM UTC
Updated: October 14, 2026 at 01:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt_k_ioctl() enforce, allowing a process to change meta mode on a non-controlling console without authorization.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
1da177e4c3f41524e886b7f1b8a0c1fc7321cac22.6.12
Vendor states this is fixed in 1c5b67a1e2cb7d78dab321280f330b056e3bf437 (fixed)
Vendor states this is fixed in 4671c3b79e337bbae28c2d79023dc642df012bde (fixed)
Vendor states this is fixed in 7bf32337a7103ccb686cbd240324bf26225ef2d6 (fixed)
Vendor states this is fixed in 9f8cbaf4b774694dcc292e60509762483ebfd9ae (fixed)
Vendor states this is fixed in a1c31e026c93e378e297a8df8328983d3013a59f (fixed)
Vendor states this is fixed in a7ad0034453ba4c353f9b8f810ee2569de33d283 (fixed)
Vendor states this is fixed in d8ead5083b203d12b8319e7cb29cc6b8836e813f (fixed)
Vendor states this is fixed in ddc4a8303347114e945b9e6e81b81d77855f7358 (fixed)
Vendor states this is fixed in 2.6.12 (unaffected)
Vendor states this is fixed in 5.10.265 (unaffected)
Vendor states this is fixed in 5.15.216 (unaffected)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.104 (unaffected)
Vendor states this is fixed in 6.18.45 (unaffected)
Vendor states this is fixed in 6.6.152 (unaffected)
Vendor states this is fixed in 7.1.9 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/9f8cbaf4b774694dcc292e60509762483ebfd9ae
Source: cverecord
https://git.kernel.org/stable/c/ddc4a8303347114e945b9e6e81b81d77855f7358
Source: cverecord
https://git.kernel.org/stable/c/1c5b67a1e2cb7d78dab321280f330b056e3bf437
Source: cverecord
https://git.kernel.org/stable/c/d8ead5083b203d12b8319e7cb29cc6b8836e813f
Source: cverecord
https://git.kernel.org/stable/c/4671c3b79e337bbae28c2d79023dc642df012bde
Source: cverecord
https://git.kernel.org/stable/c/a1c31e026c93e378e297a8df8328983d3013a59f
Source: cverecord
https://git.kernel.org/stable/c/7bf32337a7103ccb686cbd240324bf26225ef2d6
Source: cverecord
https://git.kernel.org/stable/c/a7ad0034453ba4c353f9b8f810ee2569de33d283

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card