CVE-2026-50292
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output...
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
- Record
CVE-2026-50292- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-93
- Updated
- 2026-11-02
EUVDEUVD-2026-34302
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
- Record
EUVD-2026-34302- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jcq8-v68h-2c44
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output...
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
- Record
GHSA-jcq8-v68h-2c44- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-93
- Updated
- 2026-11-02
NVD
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
- Record
CVE-2026-50292- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-93
- Updated
- 2026-11-02
OSV
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
- Record
CVE-2026-50292- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-93
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-50292
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
- Record
DEBIAN-CVE-2026-50292- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 21 moreShow less
OSVOESA-2026-2628
libinput security update
libinput is a library to handle input devices in Wayland compositors and to provide a generic X.Org input driver.It provides device detection, device handling, input device event processing and abstraction so minimize the amount of custom input code compositors need to provide the common set of functionality that users expect.
Security Fix(es):
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution(CVE-2026-50292)
- Record
OESA-2026-2628- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:39296
Red Hat Security Advisory: libinput security update
- Record
RHSA-2026:39296- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:43290
Red Hat Security Advisory: libinput security update
- Record
RHSA-2026:43290- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:39296
Moderate: libinput security update
libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.
Security Fix(es):
- libinput: local privilege escalation via crafted uinput devices (CVE-2026-50292)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:39296- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-50292
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
- Record
UBUNTU-CVE-2026-50292- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2026:39296 No score
Moderate: libinput security update
libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.
Security Fix(es):
- libinput: local privilege escalation via crafted uinput devices (CVE-2026-50292)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:39296- Updated
- 2026-11-02
OSVAZL-89378 No score
CVE-2026-50292 affecting package libinput for versions less than 1.25.0-2
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
- Record
AZL-89378- Updated
- 2026-11-05
OSVCLSA-2026-1783709526 No score
libinput: Fix of CVE-2026-50292
- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection
- Record
CLSA-2026-1783709526- Updated
- 2026-11-02
OSVCLSA-2026-1784017931 No score
libinput: Fix of CVE-2026-50292
- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection
- Record
CLSA-2026-1784017931- Updated
- 2026-11-02
OSVCLSA-2026-1784020479 No score
libinput: Fix of CVE-2026-50292
- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection
- Record
CLSA-2026-1784020479- Updated
- 2026-11-02
OSVCLSA-2026-1792170117 No score
libinput: Fix of CVE-2026-50292
- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection
- Record
CLSA-2026-1792170117- Updated
- 2026-11-02
OSVCLSA-2026-1792174065 No score
libinput: Fix of CVE-2026-50292
- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection
- Record
CLSA-2026-1792174065- Updated
- 2026-11-02
OSVMGASA-2026-0208 No score
Updated libinput packages fix security vulnerability
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
- Record
MGASA-2026-0208- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21091-1 No score
Security update for libinput
This update for libinput fixes the following issues
- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
- Record
openSUSE-SU-2026:21091-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22165-1 No score
Security update for libinput
This update for libinput fixes the following issues
- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
- Record
SUSE-SU-2026:22165-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2523-1 No score
Security update for libinput
This update for libinput fixes the following issues
- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
- Record
SUSE-SU-2026:2523-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2524-1 No score
Security update for libinput
This update for libinput fixes the following issues
- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
- Record
SUSE-SU-2026:2524-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2529-1 No score
Security update for libinput
This update for libinput fixes the following issues
- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
- Record
SUSE-SU-2026:2529-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2530-1 No score
Security update for libinput
This update for libinput fixes the following issues
- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
- Record
SUSE-SU-2026:2530-1- Updated
- 2026-11-02
OSVUSN-8602-1 No score
libinput vulnerability
It was discovered that libinput did not properly escape device properties. A local attacker could possibly use this issue to inject arbitrary udev properties and execute arbitrary code as root.
- Record
USN-8602-1- Updated
- 2026-11-02
OSVUSN-8753-1 No score
libinput vulnerability
It was discovered that libinput did not properly escape device properties. A local attacker could possibly use this issue to inject arbitrary udev properties and execute arbitrary code as root.
- Record
USN-8753-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libinputAlmaLinux:10 |
before 1.30.1-2.el10_2 | 1.30.1-2.el10_2 |
libinput-develAlmaLinux:10 |
before 1.30.1-2.el10_2 | 1.30.1-2.el10_2 |
libinput-utilsAlmaLinux:10 |
before 1.30.1-2.el10_2 | 1.30.1-2.el10_2 |
libinputAzure Linux:3 |
before 1.25.0-2 | 1.25.0-2 |
libinputTuxCare:CentOS:7 |
before 1.10.7-2.el7.tuxcare.els2 | 1.10.7-2.el7.tuxcare.els2 |
libinput-develTuxCare:CentOS:7 |
before 1.10.7-2.el7.tuxcare.els2 | 1.10.7-2.el7.tuxcare.els2 |
libinputTuxCare:AlmaLinux:9.2 |
before 1.19.3-7.el9_2.tuxcare.els1 | 1.19.3-7.el9_2.tuxcare.els1 |
libinput-develTuxCare:AlmaLinux:9.2 |
before 1.19.3-7.el9_2.tuxcare.els1 | 1.19.3-7.el9_2.tuxcare.els1 |
libinput-testTuxCare:AlmaLinux:9.2 |
before 1.19.3-7.el9_2.tuxcare.els1 | 1.19.3-7.el9_2.tuxcare.els1 |
libinput-utilsTuxCare:AlmaLinux:9.2 |
before 1.19.3-7.el9_2.tuxcare.els1 | 1.19.3-7.el9_2.tuxcare.els1 |
Show 53 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libinputTuxCare:AlmaLinux:9.6 |
before 1.19.3-7.el9_6.tuxcare.els1 | 1.19.3-7.el9_6.tuxcare.els1 |
libinput-develTuxCare:AlmaLinux:9.6 |
before 1.19.3-7.el9_6.tuxcare.els1 | 1.19.3-7.el9_6.tuxcare.els1 |
libinput-testTuxCare:AlmaLinux:9.6 |
before 1.19.3-7.el9_6.tuxcare.els1 | 1.19.3-7.el9_6.tuxcare.els1 |
libinput-utilsTuxCare:AlmaLinux:9.6 |
before 1.19.3-7.el9_6.tuxcare.els1 | 1.19.3-7.el9_6.tuxcare.els1 |
libinputTuxCare:OracleLinux:7 |
before 1.10.7-2.el7.tuxcare.els2 | 1.10.7-2.el7.tuxcare.els2 |
libinput-develTuxCare:OracleLinux:7 |
before 1.10.7-2.el7.tuxcare.els2 | 1.10.7-2.el7.tuxcare.els2 |
libinputTuxCare:RHEL:7 |
before 1.10.7-2.el7.tuxcare.els2 | 1.10.7-2.el7.tuxcare.els2 |
libinput-develTuxCare:RHEL:7 |
before 1.10.7-2.el7.tuxcare.els2 | 1.10.7-2.el7.tuxcare.els2 |
libinputDebian:12 |
before 1.22.1-1+deb12u1, plus listed versions 1.22.1-1 |
1.22.1-1+deb12u1 |
libinputDebian:13 |
before 1.28.1-1+deb13u1, plus listed versions 1.28.1-1 |
1.28.1-1+deb13u1 |
libinputDebian:14 |
before 1.31.3-1, plus listed versions 1.28.1-11.30.0-11.30.1-11.31.0-11.31.1-11.31.2-1 |
1.31.3-1 |
libinputMageia:9 |
before 1.23.0-2.1.mga9 | 1.23.0-2.1.mga9 |
libinputopenEuler:20.03-LTS-SP4 |
before 1.15.6-4.oe2003sp4 | 1.15.6-4.oe2003sp4 |
libinputopenEuler:22.03-LTS-SP4 |
before 1.19.2-3.oe2203sp4 | 1.19.2-3.oe2203sp4 |
libinputopenEuler:24.03-LTS-SP1 |
before 1.24.0-3.oe2403sp1 | 1.24.0-3.oe2403sp1 |
libinputopenEuler:24.03-LTS-SP3 |
before 1.24.0-3.oe2403sp3 | 1.24.0-3.oe2403sp3 |
libinputRed Hat:enterprise_linux:10.2 |
before 0:1.30.1-2.el10_2 | 0:1.30.1-2.el10_2 |
libinput-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:1.30.1-2.el10_2 | 0:1.30.1-2.el10_2 |
libinput-debugsourceRed Hat:enterprise_linux:10.2 |
before 0:1.30.1-2.el10_2 | 0:1.30.1-2.el10_2 |
libinput-test-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:1.30.1-2.el10_2 | 0:1.30.1-2.el10_2 |
libinput-utilsRed Hat:enterprise_linux:10.2 |
before 0:1.30.1-2.el10_2 | 0:1.30.1-2.el10_2 |
libinput-utils-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:1.30.1-2.el10_2 | 0:1.30.1-2.el10_2 |
libinput-develRed Hat:enterprise_linux:10.2 |
before 0:1.30.1-2.el10_2 | 0:1.30.1-2.el10_2 |
libinputRed Hat:enterprise_linux_eus:10.0 |
before 0:1.26.1-5.el10_0.1 | 0:1.26.1-5.el10_0.1 |
libinput-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 0:1.26.1-5.el10_0.1 | 0:1.26.1-5.el10_0.1 |
libinput-debugsourceRed Hat:enterprise_linux_eus:10.0 |
before 0:1.26.1-5.el10_0.1 | 0:1.26.1-5.el10_0.1 |
libinput-test-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 0:1.26.1-5.el10_0.1 | 0:1.26.1-5.el10_0.1 |
libinput-utilsRed Hat:enterprise_linux_eus:10.0 |
before 0:1.26.1-5.el10_0.1 | 0:1.26.1-5.el10_0.1 |
libinput-utils-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 0:1.26.1-5.el10_0.1 | 0:1.26.1-5.el10_0.1 |
libinput-develRed Hat:enterprise_linux_eus:10.0 |
before 0:1.26.1-5.el10_0.1 | 0:1.26.1-5.el10_0.1 |
libinputRocky Linux:10 |
before 0:1.30.1-2.el10_2 | 0:1.30.1-2.el10_2 |
libinputSUSE:Linux Enterprise Server 16.0 From an advisory covering 2 CVEs |
before 1.28.1-160000.3.1 | 1.28.1-160000.3.1 |
libinputSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 2 CVEs |
before 1.28.1-160000.3.1 | 1.28.1-160000.3.1 |
libinputSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs |
before 1.21.0-150500.3.3.1 | 1.21.0-150500.3.3.1 |
libinputSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs |
before 1.21.0-150500.3.3.1 | 1.21.0-150500.3.3.1 |
libinputSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs |
before 1.21.0-150500.3.3.1 | 1.21.0-150500.3.3.1 |
libinputSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs |
before 1.21.0-150500.3.3.1 | 1.21.0-150500.3.3.1 |
libinputSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 1.27.1-150700.3.3.1 | 1.27.1-150700.3.3.1 |
libinputSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 2 CVEs |
before 1.25.0-150600.3.3.1 | 1.25.0-150600.3.3.1 |
libinputSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 2 CVEs |
before 1.25.0-150600.3.3.1 | 1.25.0-150600.3.3.1 |
libinputSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 1.19.4-150400.3.3.1 | 1.19.4-150400.3.3.1 |
libinputSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.19.4-150400.3.3.1 | 1.19.4-150400.3.3.1 |
libinputSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.19.4-150400.3.3.1 | 1.19.4-150400.3.3.1 |
libinputSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 1.19.4-150400.3.3.1 | 1.19.4-150400.3.3.1 |
libinputUbuntu:16.04:LTS |
All versions, plus listed versions 1.0.1-1ubuntu11.1.0-1ubuntu11.1.0-1ubuntu21.1.3-1ubuntu11.1.4-1ubuntu1 Show 4 moreShow less1.1.4-1ubuntu21.2.2-1ubuntu11.2.3-1ubuntu11.6.3-1ubuntu1~16.04.1 |
None known |
libinputUbuntu:18.04:LTS |
All versions, plus listed versions 1.8.2-1ubuntu21.9.2-11.9.3-11.9.4-11.9.4-2 Show 8 moreShow less1.9.4-2ubuntu11.10.0-11.10.1-11.10.3-21.10.4-11.10.4-1ubuntu0.18.04.11.10.4-1ubuntu0.18.04.21.10.4-1ubuntu0.18.04.3 |
None known |
libinputUbuntu:Pro:20.04:LTS |
before 1.15.5-1ubuntu0.3+esm1, plus listed versions 1.14.1-21.14.2-11.14.3-11.14.3-1build11.15.1-1 Show 7 moreShow less1.15.2-11.15.3-11.15.4-11.15.5-11.15.5-1ubuntu0.11.15.5-1ubuntu0.21.15.5-1ubuntu0.3 |
1.15.5-1ubuntu0.3+esm1 |
libinputUbuntu:22.04:LTS |
before 1.20.0-1ubuntu0.4, plus listed versions 1.18.1-11.19.2-11.19.3-11.19.3-21.20.0-11.20.0-1ubuntu0.11.20.0-1ubuntu0.21.20.0-1ubuntu0.3 |
1.20.0-1ubuntu0.4 |
libinputUbuntu:24.04:LTS |
before 1.25.0-1ubuntu3.7, plus listed versions 1.23.0-21.23.0-2.11.25.0-11.25.0-1ubuntu11.25.0-1ubuntu2 Show 7 moreShow less1.25.0-1ubuntu31.25.0-1ubuntu3.11.25.0-1ubuntu3.21.25.0-1ubuntu3.31.25.0-1ubuntu3.41.25.0-1ubuntu3.51.25.0-1ubuntu3.6 |
1.25.0-1ubuntu3.7 |
libinputUbuntu:25.10 |
All versions, plus listed versions 1.27.1-11.28.1-11.28.1-1build11.28.1-1ubuntu0.11.28.1-1ubuntu0.21.28.1-1ubuntu0.31.28.1-1ubuntu0.4 |
None known |
libinputUbuntu:26.04:LTS |
before 1.31.1-1ubuntu1.2, plus listed versions 1.28.1-1build11.28.1-1ubuntu21.30.0-11.30.1-11.31.0-1 Show 4 moreShow less1.31.0-1ubuntu0.11.31.1-11.31.1-1ubuntu11.31.1-1ubuntu1.1 |
1.31.1-1ubuntu1.2 |
libinputopenSUSE:Leap 16.0 From an advisory covering 2 CVEs |
before 1.28.1-160000.3.1 | 1.28.1-160000.3.1 |
libinput-extraopenSUSE:Leap 16.0 From an advisory covering 2 CVEs |
before 1.28.1-160000.3.1 | 1.28.1-160000.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-50292 is a high vulnerability (CVSS 7.4) in Freedesktop Libinput, published June 4, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in libinput 1.30.1-2.el10_2.
References
gitlab.freedesktop.org/libinput/libinput/-/work_items/1296
openwall.com/lists/oss-security/2026/06/04/5
nvd.nist.gov/vuln/detail/CVE-2026-50292
github.com/advisories/GHSA-jcq8-v68h-2c44
access.redhat.com/errata/RHSA-2026:39296
Show 32 moreShow less
bugzilla.redhat.com/2485390
errata.almalinux.org/10/ALSA-2026-39296.html
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1783709526.html
security-tracker.debian.org/tracker/CVE-2026-50292
advisories.mageia.org/MGASA-2026-0208.html
bugs.mageia.org/show_bug.cgi?id=35635
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-2628
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39296.json
cve.org/CVERecord?id=CVE-2026-50292
errata.rockylinux.org/RLSA-2026:39296
suse.com/support/update/announcement/2026/suse-su-202622165-1
bugzilla.suse.com/1267852
ubuntu.com/security/CVE-2026-50292