Every CVE Search/ Get API key

CVE-2026-72693

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

7.8 HighFix available

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticate_user() relies on stat("/proc/<pid>/fd/0"). stat() on /proc/<pid>/fd/0 follows the symlink to the underlying TTY device node. As a result, buf.st_uid reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to root or the getty owner after logout while an unprivileged process still has fd 0 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the -u path executes a passwordless login as the selected user. In the documented kbrequest/init deployment using openvt -us, this can result in passwordless login -f root on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use openvt -u from a privileged kbrequest/init path.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.15%Unchanged since Aug 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticate_user() relies on stat("/proc/<pid>/fd/0"). stat() on /proc/<pid>/fd/0 follows the symlink to the underlying TTY device node. As a result, buf.st_uid reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to root or the getty owner after logout while an unprivileged process still has fd 0 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the -u path executes a passwordless login as the selected user. In the documented kbrequest/init deployment using openvt -us, this can result in passwordless login -f root on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use openvt -u from a privileged kbrequest/init path.

Record
CVE-2026-72693
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-284
Updated
2026-11-05
EUVDEUVD-2026-55978 7.8

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticate_user() relies on stat("/proc/<pid>/fd/0"). stat() on /proc/<pid>/fd/0 follows the symlink to the underlying TTY device node. As a result, buf.st_uid reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to root or the getty owner after logout while an unprivileged process still has fd 0 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the -u path executes a passwordless login as the selected user. In the documented kbrequest/init deployment using openvt -us, this can result in passwordless login -f root on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use openvt -u from a privileged kbrequest/init path.

Record
EUVD-2026-55978
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
GitHub AdvisoriesGHSA-6766-cx7r-c5q6 7.8

`openvt -u` is intended to identify the owner of the current VT and then execute `login` as that...

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticate_user() relies on stat("/proc/<pid>/fd/0"). stat() on /proc/<pid>/fd/0 follows the symlink to the underlying TTY device node. As a result, buf.st_uid reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to root or the getty owner after logout while an unprivileged process still has fd 0 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the -u path executes a passwordless login as the selected user. In the documented kbrequest/init deployment using openvt -us, this can result in passwordless login -f root on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use openvt -u from a privileged kbrequest/init path.

Record
GHSA-6766-cx7r-c5q6
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-284
Updated
2026-11-02
NVD 7.8

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticate_user() relies on stat("/proc/<pid>/fd/0"). stat() on /proc/<pid>/fd/0 follows the symlink to the underlying TTY device node. As a result, buf.st_uid reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to root or the getty owner after logout while an unprivileged process still has fd 0 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the -u path executes a passwordless login as the selected user. In the documented kbrequest/init deployment using openvt -us, this can result in passwordless login -f root on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use openvt -u from a privileged kbrequest/init path.

Record
CVE-2026-72693
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-284
Updated
2026-11-06
OSVDEBIAN-CVE-2026-72693 7.8

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticate_user() relies on stat("/proc/<pid>/fd/0"). stat() on /proc/<pid>/fd/0 follows the symlink to the underlying TTY device node. As a result, buf.st_uid reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to root or the getty owner after logout while an unprivileged process still has fd 0 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the -u path executes a passwordless login as the selected user. In the documented kbrequest/init deployment using openvt -us, this can result in passwordless login -f root on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use openvt -u from a privileged kbrequest/init path.

Record
DEBIAN-CVE-2026-72693
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVOESA-2026-3505 7.8

kbd security update

The project contains tools for managing Linux console ,including Linux console,virtual terminals, keyboard, etc, mainly, what they do is loading console fonts and keyboard maps.

Security Fix(es):

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticate_user() relies on stat(&quot;/proc/&lt;pid&gt;/fd/0&quot;). stat() on /proc/&lt;pid&gt;/fd/0 follows the symlink to the underlying TTY device node. As a result, buf.st_uid reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to root or the getty owner after logout while an unprivileged process still has fd 0 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the -u path executes a passwordless login as the selected user. In the documented kbrequest/init deployment using openvt -us, this can result in passwordless login -f root on the spawned VT.(CVE-2026-72693)

Record
OESA-2026-3505
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 23 moreShow less
OSVRHSA-2026:41136 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:41136
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57597 7.8

Red Hat Security Advisory: kbd security update

Record
RHSA-2026:57597
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57610 7.8

Red Hat Security Advisory: kbd security update

Record
RHSA-2026:57610
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:78951 7.8

Red Hat Security Advisory: kbd security update

Record
RHSA-2026:78951
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:57597 7.8

Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files.

Security Fix(es):

  • kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVE-2026-72693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57597
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:57610 7.8

Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files.

Security Fix(es):

  • kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVE-2026-72693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57610
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:78951 7.8

Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files.

Security Fix(es):

  • kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVE-2026-72693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:78951
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-72693 7.8

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticate_user() relies on stat("/proc/<pid>/fd/0"). stat() on /proc/<pid>/fd/0 follows the symlink to the underlying TTY device node. As a result, buf.st_uid reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to root or the getty owner after logout while an unprivileged process still has fd 0 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the -u path executes a passwordless login as the selected user. In the documented kbrequest/init deployment using openvt -us, this can result in passwordless login -f root on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use openvt -u from a privileged kbrequest/init path.

Record
UBUNTU-CVE-2026-72693
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:57597 No score

Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files.

Security Fix(es):

  • kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVE-2026-72693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57597
Updated
2026-11-02
OSVALSA-2026:57610 No score

Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files.

Security Fix(es):

  • kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVE-2026-72693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57610
Updated
2026-11-02
OSVALSA-2026:78951 No score

Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files.

Security Fix(es):

  • kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVE-2026-72693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:78951
Updated
2026-11-02
OSVAZL-95928 No score

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticate_user() relies on stat("/proc/<pid>/fd/0"). stat() on /proc/<pid>/fd/0 follows the symlink to the underlying TTY device node. As a result, buf.st_uid reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to root or the getty owner after logout while an unprivileged process still has fd 0 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the -u path executes a passwordless login as the selected user. In the documented kbrequest/init deployment using openvt -us, this can result in passwordless login -f root on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use openvt -u from a privileged kbrequest/init path.

Record
AZL-95928
Updated
2026-11-05
OSVCLSA-2026-1788265535 No score

kbd: Fix of CVE-2026-72693

  • CVE-2026-72693: require a matching process owner and controlling terminal when openvt -u determines the current VT owner, instead of trusting the ownership of an inherited file descriptor, and refuse root as a pre-authenticated target. The old check could be satisfied by a process not owned by the VT owner, starting login -f for the wrong user without a password.
Record
CLSA-2026-1788265535
Updated
2026-11-02
OSVCLSA-2026-1788600455 No score

kbd: Fix of CVE-2026-72693

  • CVE-2026-72693: fix openvt -u process ownership validation
Record
CLSA-2026-1788600455
Updated
2026-11-02
OSVMGASA-2026-0444 No score

Updated kbd packages fix a security vulnerability

Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login. (CVE-2026-72693)

Record
MGASA-2026-0444
Updated
2026-11-02
OSVopenSUSE-SU-2026:21939-1 No score

Security update for kbd

This update for kbd fixes the following issue:

  • CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login (bsc#1275441).
Record
openSUSE-SU-2026:21939-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-72693 No score

CVE-2026-72693 in kbd - Patched by Root

Root has patched CVE-2026-72693 in the kbd package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-72693
Updated
2026-11-02
OSVSUSE-SU-2026:23742-1 No score

Security update for kbd

This update for kbd fixes the following issue:

  • CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login (bsc#1275441).
Record
SUSE-SU-2026:23742-1
Updated
2026-11-02
OSVSUSE-SU-2026:23844-1 No score

Security update for kbd

This update for kbd fixes the following issue:

  • CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login (bsc#1275441).
Record
SUSE-SU-2026:23844-1
Updated
2026-11-02
OSVSUSE-SU-2026:23893-1 No score

Security update for kbd

This update for kbd fixes the following issue:

  • CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login (bsc#1275441).
Record
SUSE-SU-2026:23893-1
Updated
2026-11-02
OSVSUSE-SU-2026:23911-1 No score

Security update for kbd

This update for kbd fixes the following issue:

  • CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login (bsc#1275441).
Record
SUSE-SU-2026:23911-1
Updated
2026-11-02
OSVSUSE-SU-2026:4207-1 No score

Security update for kbd

This update for kbd fixes the following issue:

  • CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login (bsc#1275441).
Record
SUSE-SU-2026:4207-1
Updated
2026-11-02
OSVSUSE-SU-2026:4211-1 No score

Security update for kbd

This update for kbd fixes the following issue:

  • CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login (bsc#1275441).
Record
SUSE-SU-2026:4211-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kbd
AlmaLinux:10
 before 2.6.4-8.el10_2
2.6.4-8.el10_2
kbd-legacy
AlmaLinux:10
 before 2.6.4-8.el10_2
2.6.4-8.el10_2
kbd-misc
AlmaLinux:10
 before 2.6.4-8.el10_2
2.6.4-8.el10_2
kbd
AlmaLinux:9
 before 2.4.0-12.el9_8
2.4.0-12.el9_8
kbd-legacy
AlmaLinux:9
 before 2.4.0-12.el9_8
2.4.0-12.el9_8
kbd-misc
AlmaLinux:9
 before 2.4.0-12.el9_8
2.4.0-12.el9_8
kbd
AlmaLinux:8
 before 2.0.4-11.el8_10.1
2.0.4-11.el8_10.1
kbd-legacy
AlmaLinux:8
 before 2.0.4-11.el8_10.1
2.0.4-11.el8_10.1
kbd-misc
AlmaLinux:8
 before 2.0.4-11.el8_10.1
2.0.4-11.el8_10.1
kbd
Azure Linux:3
 before 2.2.0-3
2.2.0-3
Show 67 moreShow less
Affected packages
PackageAffectedFixed
kbd
TuxCare:AlmaLinux:9.6
 before 2.4.0-11.el9_6.tuxcare.els1
2.4.0-11.el9_6.tuxcare.els1
kbd-legacy
TuxCare:AlmaLinux:9.6
 before 2.4.0-11.el9_6.tuxcare.els1
2.4.0-11.el9_6.tuxcare.els1
kbd-misc
TuxCare:AlmaLinux:9.6
 before 2.4.0-11.el9_6.tuxcare.els1
2.4.0-11.el9_6.tuxcare.els1
kbd
TuxCare:AlmaLinux:9.2
 before 2.4.0-8.el9.tuxcare.els1
2.4.0-8.el9.tuxcare.els1
kbd-legacy
TuxCare:AlmaLinux:9.2
 before 2.4.0-8.el9.tuxcare.els1
2.4.0-8.el9.tuxcare.els1
kbd-misc
TuxCare:AlmaLinux:9.2
 before 2.4.0-8.el9.tuxcare.els1
2.4.0-8.el9.tuxcare.els1
kbd
Debian:12
 All versions, plus listed versions
2.10.0-12.5.1-12.6.4-12.6.4-22.6.4-3
Show 5 moreShow less
2.7.1-12.7.1-22.7.1-2+exp12.7~rc1-12.9.0-1
 None known
kbd
Debian:13
 All versions, plus listed versions
2.10.0-12.7.1-22.7.1-2+exp12.9.0-1
 None known
kbd
Debian:14
 before 2.10.0-1, plus listed versions
2.7.1-22.7.1-2+exp12.9.0-1
2.10.0-1
kbd
Mageia:10
 before 2.9.0-1.1.mga10
2.9.0-1.1.mga10
kbd
Mageia:9
 before 2.5.1-1.1.mga9
2.5.1-1.1.mga9
kbd
openEuler:20.03-LTS-SP4
 before 2.2.0-4.oe2003sp4
2.2.0-4.oe2003sp4
kbd
openEuler:22.03-LTS-SP4
 before 2.5.1-3.oe2203sp4
2.5.1-3.oe2203sp4
kbd
openEuler:24.03-LTS-SP1
 before 2.6.1-3.oe2403sp1
2.6.1-3.oe2403sp1
kbd
openEuler:24.03-LTS-SP3
 before 2.6.1-3.oe2403sp3
2.6.1-3.oe2403sp3
kbd
openEuler:24.03-LTS-SP4
 before 2.6.1-3.oe2403sp4
2.6.1-3.oe2403sp4
kbd
Red Hat:hummingbird:1
 before 0:2.10.0-2.hum1
0:2.10.0-2.hum1
kbd-legacy
Red Hat:hummingbird:1
 before 0:2.10.0-2.hum1
0:2.10.0-2.hum1
kbd-misc
Red Hat:hummingbird:1
 before 0:2.10.0-2.hum1
0:2.10.0-2.hum1
kbd
Red Hat:enterprise_linux:10.2
 before 0:2.6.4-8.el10_2
0:2.6.4-8.el10_2
kbd-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.6.4-8.el10_2
0:2.6.4-8.el10_2
kbd-debugsource
Red Hat:enterprise_linux:10.2
 before 0:2.6.4-8.el10_2
0:2.6.4-8.el10_2
kbd-legacy
Red Hat:enterprise_linux:10.2
 before 0:2.6.4-8.el10_2
0:2.6.4-8.el10_2
kbd-misc
Red Hat:enterprise_linux:10.2
 before 0:2.6.4-8.el10_2
0:2.6.4-8.el10_2
kbd
Red Hat:enterprise_linux:9::baseos
 before 0:2.4.0-12.el9_8
0:2.4.0-12.el9_8
kbd-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:2.4.0-12.el9_8
0:2.4.0-12.el9_8
kbd-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:2.4.0-12.el9_8
0:2.4.0-12.el9_8
kbd-legacy
Red Hat:enterprise_linux:9::baseos
 before 0:2.4.0-12.el9_8
0:2.4.0-12.el9_8
kbd-misc
Red Hat:enterprise_linux:9::baseos
 before 0:2.4.0-12.el9_8
0:2.4.0-12.el9_8
kbd
Red Hat:enterprise_linux:8::baseos
 before 0:2.0.4-11.el8_10.1
0:2.0.4-11.el8_10.1
kbd-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.0.4-11.el8_10.1
0:2.0.4-11.el8_10.1
kbd-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:2.0.4-11.el8_10.1
0:2.0.4-11.el8_10.1
kbd-legacy
Red Hat:enterprise_linux:8::baseos
 before 0:2.0.4-11.el8_10.1
0:2.0.4-11.el8_10.1
kbd-misc
Red Hat:enterprise_linux:8::baseos
 before 0:2.0.4-11.el8_10.1
0:2.0.4-11.el8_10.1
kbd
Rocky Linux:10
 before 0:2.6.4-8.el10_2
0:2.6.4-8.el10_2
kbd
Rocky Linux:9
 before 0:2.4.0-12.el9_8
0:2.4.0-12.el9_8
kbd
Rocky Linux:8
 before 0:2.0.4-11.el8_10.1
0:2.0.4-11.el8_10.1
kbd
Root:Debian:12
 before 2.5.1-1.aikido.1
2.5.1-1.aikido.1
rootio-kbd
Root:Debian:12
 before 2.5.1-1.aikido.1
2.5.1-1.aikido.1
kbd
SUSE:Linux Micro 6.1
 before 2.6.4-slfo.1.1_2.1
2.6.4-slfo.1.1_2.1
kbd
SUSE:Linux Micro 6.0
 before 2.6.4-2.1
2.6.4-2.1
kbd
SUSE:Linux Micro 6.2
 before 2.7.1-160000.3.1
2.7.1-160000.3.1
kbd
SUSE:Linux Enterprise Server 16.0
 before 2.7.1-160000.3.1
2.7.1-160000.3.1
kbd
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 2.7.1-160000.3.1
2.7.1-160000.3.1
kbd
SUSE:Linux Enterprise Micro 5.3
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise Micro 5.4
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise Micro 5.5
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 2.4.0-150400.5.12.1
2.4.0-150400.5.12.1
kbd
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 2.4.0-150700.15.10.1
2.4.0-150700.15.10.1
kbd
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.15.5-1ubuntu1
 None known
kbd
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.15.5-1ubuntu41.15.5-1ubuntu5
 None known
kbd
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.0.3-2ubuntu32.0.4-2ubuntu1
 None known
kbd
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.0.4-4ubuntu2
 None known
kbd
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.3.0-3ubuntu32.3.0-3ubuntu42.3.0-3ubuntu4.22.04
 None known
kbd
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.5.1-1ubuntu12.6.4-2ubuntu12.6.4-2ubuntu2
 None known
kbd
Ubuntu:26.10
 All versions, plus listed versions
2.7.1-2ubuntu22.9.0-1ubuntu1
 None known
kbd
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.7.1-2ubuntu12.7.1-2ubuntu2
 None known
kbd
openSUSE:Leap 16.0
 before 2.7.1-160000.3.1
2.7.1-160000.3.1

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-72693 is a high vulnerability (CVSS 7.8) in Red Hat Enterprise Linux 10, published August 11, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 3rd percentile. Fixed in kbd 2.6.4-8.el10_2.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open