{"id":"CVE-2026-50292","aliases":["ALSA-2026:39296","AZL-89378","CLSA-2026-1783709526","CLSA-2026-1784017931","CLSA-2026-1784020479","CLSA-2026-1792170117","CLSA-2026-1792174065","DEBIAN-CVE-2026-50292","EUVD-2026-34302","GHSA-jcq8-v68h-2c44","MGASA-2026-0208","OESA-2026-2628","RHSA-2026:39296","RHSA-2026:43290","RLSA-2026:39296","SUSE-SU-2026:22165-1","SUSE-SU-2026:2523-1","SUSE-SU-2026:2524-1","SUSE-SU-2026:2529-1","SUSE-SU-2026:2530-1","UBUNTU-CVE-2026-50292","USN-8602-1","USN-8753-1","openSUSE-SU-2026:21091-1"],"status":"published","title":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output...","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00313,"percentile":0.24509,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-93"],"published":"2026-06-04T16:41:36Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:10","package":"libinput","fixed_in":["1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libinput-devel","fixed_in":["1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libinput-utils","fixed_in":["1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libinput","fixed_in":["1.25.0-2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libinput","fixed_in":["1.10.7-2.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libinput-devel","fixed_in":["1.10.7-2.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libinput","fixed_in":["1.19.3-7.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libinput-devel","fixed_in":["1.19.3-7.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libinput-test","fixed_in":["1.19.3-7.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libinput-utils","fixed_in":["1.19.3-7.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libinput","fixed_in":["1.19.3-7.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libinput-devel","fixed_in":["1.19.3-7.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libinput-test","fixed_in":["1.19.3-7.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libinput-utils","fixed_in":["1.19.3-7.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libinput","fixed_in":["1.10.7-2.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libinput-devel","fixed_in":["1.10.7-2.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libinput","fixed_in":["1.10.7-2.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libinput-devel","fixed_in":["1.10.7-2.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libinput","fixed_in":["1.22.1-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libinput","fixed_in":["1.28.1-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libinput","fixed_in":["1.31.3-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libinput","fixed_in":["1.23.0-2.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libinput","fixed_in":["1.15.6-4.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libinput","fixed_in":["1.19.2-3.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libinput","fixed_in":["1.24.0-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"libinput","fixed_in":["1.24.0-3.oe2403sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput","fixed_in":["0:1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-debuginfo","fixed_in":["0:1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-debugsource","fixed_in":["0:1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-test-debuginfo","fixed_in":["0:1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-utils","fixed_in":["0:1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-utils-debuginfo","fixed_in":["0:1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-devel","fixed_in":["0:1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput","fixed_in":["0:1.26.1-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-debuginfo","fixed_in":["0:1.26.1-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-debugsource","fixed_in":["0:1.26.1-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-test-debuginfo","fixed_in":["0:1.26.1-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-utils","fixed_in":["0:1.26.1-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-utils-debuginfo","fixed_in":["0:1.26.1-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-devel","fixed_in":["0:1.26.1-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"libinput","fixed_in":["0:1.30.1-2.el10_2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libinput","fixed_in":["1.15.5-1ubuntu0.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libinput","fixed_in":["1.20.0-1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libinput","fixed_in":["1.25.0-1ubuntu3.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libinput","fixed_in":["1.31.1-1ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libinput-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.7-2.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.7-2.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-7.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-7.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libinput-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-7.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libinput-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-7.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-7.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-7.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libinput-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-7.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libinput-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-7.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.7-2.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.7-2.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.7-2.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.7-2.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.1-1+deb12u1"}]}],"versions":["1.22.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.1-1+deb13u1"}]}],"versions":["1.28.1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.3-1"}]}],"versions":["1.28.1-1","1.30.0-1","1.30.1-1","1.31.0-1","1.31.1-1","1.31.2-1"]},{"source":"osv","ecosystem":"Mageia:9","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-2.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.6-4.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-3.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-3.oe2403sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.1-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.1-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.1-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.1-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.1-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.1-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.1-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.1-2.el10_2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.1-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.1-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.0-150500.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.0-150500.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.0-150500.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.0-150500.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.1-150700.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-150600.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-150600.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.1-1ubuntu1","1.1.0-1ubuntu1","1.1.0-1ubuntu2","1.1.3-1ubuntu1","1.1.4-1ubuntu1","1.1.4-1ubuntu2","1.2.2-1ubuntu1","1.2.3-1ubuntu1","1.6.3-1ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.2-1ubuntu2","1.9.2-1","1.9.3-1","1.9.4-1","1.9.4-2","1.9.4-2ubuntu1","1.10.0-1","1.10.1-1","1.10.3-2","1.10.4-1","1.10.4-1ubuntu0.18.04.1","1.10.4-1ubuntu0.18.04.2","1.10.4-1ubuntu0.18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1ubuntu0.3+esm1"}]}],"versions":["1.14.1-2","1.14.2-1","1.14.3-1","1.14.3-1build1","1.15.1-1","1.15.2-1","1.15.3-1","1.15.4-1","1.15.5-1","1.15.5-1ubuntu0.1","1.15.5-1ubuntu0.2","1.15.5-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.0-1ubuntu0.4"}]}],"versions":["1.18.1-1","1.19.2-1","1.19.3-1","1.19.3-2","1.20.0-1","1.20.0-1ubuntu0.1","1.20.0-1ubuntu0.2","1.20.0-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-1ubuntu3.7"}]}],"versions":["1.23.0-2","1.23.0-2.1","1.25.0-1","1.25.0-1ubuntu1","1.25.0-1ubuntu2","1.25.0-1ubuntu3","1.25.0-1ubuntu3.1","1.25.0-1ubuntu3.2","1.25.0-1ubuntu3.3","1.25.0-1ubuntu3.4","1.25.0-1ubuntu3.5","1.25.0-1ubuntu3.6"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.27.1-1","1.28.1-1","1.28.1-1build1","1.28.1-1ubuntu0.1","1.28.1-1ubuntu0.2","1.28.1-1ubuntu0.3","1.28.1-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.1-1ubuntu1.2"}]}],"versions":["1.28.1-1build1","1.28.1-1ubuntu2","1.30.0-1","1.30.1-1","1.31.0-1","1.31.0-1ubuntu0.1","1.31.1-1","1.31.1-1ubuntu1","1.31.1-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1ubuntu0.3+esm1"}]}],"versions":["1.14.1-2","1.14.2-1","1.14.3-1","1.14.3-1build1","1.15.1-1","1.15.2-1","1.15.3-1","1.15.4-1","1.15.5-1","1.15.5-1ubuntu0.1","1.15.5-1ubuntu0.2","1.15.5-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.0-1ubuntu0.4"}]}],"versions":["1.18.1-1","1.19.2-1","1.19.3-1","1.19.3-2","1.20.0-1","1.20.0-1ubuntu0.1","1.20.0-1ubuntu0.2","1.20.0-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-1ubuntu3.7"}]}],"versions":["1.23.0-2","1.23.0-2.1","1.25.0-1","1.25.0-1ubuntu1","1.25.0-1ubuntu2","1.25.0-1ubuntu3","1.25.0-1ubuntu3.1","1.25.0-1ubuntu3.2","1.25.0-1ubuntu3.3","1.25.0-1ubuntu3.4","1.25.0-1ubuntu3.5","1.25.0-1ubuntu3.6"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.1-1ubuntu1.2"}]}],"versions":["1.28.1-1build1","1.28.1-1ubuntu2","1.30.0-1","1.30.1-1","1.31.0-1","1.31.0-1ubuntu0.1","1.31.1-1","1.31.1-1ubuntu1","1.31.1-1ubuntu1.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.1-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libinput-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.1-160000.3.1"}]}],"bundled":2}],"products":[{"vendor":"freedesktop","product":"libinput"},{"vendor":"microsoft","product":"libinput"}],"references":[{"url":"https://gitlab.freedesktop.org/libinput/libinput/-/work_items/1296","tags":["exploit","Vendor Advisory","web","article"]},{"url":"https://gitlab.freedesktop.org/libinput/libinput/-/commit/76f0d8a7f57e2868882864b4611281f12f704b55","tags":["Patch","fix"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/04/5","tags":["Mailing List","Patch","Third Party Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50292","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-jcq8-v68h-2c44"},{"url":"https://access.redhat.com/errata/RHSA-2026:39296","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50292","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485390","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-39296.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1783709526.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784017931.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784020479.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792170117.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792174065.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50292.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-50292","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0208.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35635","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/04/16","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2628","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485390","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39296.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50292","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:43290","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43290.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:39296","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622165-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1267852","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50292","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262523-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262524-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262529-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262530-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-50292","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8602-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8753-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-50292","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","status":"published","published":"2026-06-04T16:41:36.354Z","modified":"2026-06-04T18:12:18.647Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T14:20:09.098623Z"}],"euvd":[{"id":"EUVD-2026-34302","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","status":"published","published":"2026-06-04T16:41:36Z","modified":"2026-06-04T18:12:18Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:52.744481Z"}],"ghsa":[{"id":"GHSA-jcq8-v68h-2c44","title":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output...","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","status":"published","published":"2026-06-04T18:30:33Z","modified":"2026-06-04T18:30:39Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T15:08:33.048787Z"}],"nvd":[{"id":"CVE-2026-50292","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","status":"published","published":"2026-06-04T18:16:32.53Z","modified":"2026-07-22T20:10:00.127Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T14:12:22.022466Z"}],"osv":[{"id":"CVE-2026-50292","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","status":"published","published":"2026-06-04T16:41:36.354Z","modified":"2026-10-28T11:16:35.647687912Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T15:45:07.431113Z"},{"id":"DEBIAN-CVE-2026-50292","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","status":"published","published":"2026-06-04T18:16:32.53Z","modified":"2026-10-01T03:03:17.013356607Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:56.877408Z"},{"id":"OESA-2026-2628","title":"libinput security update","description":"libinput is a library to handle input devices in Wayland compositors and to provide  a generic X.Org input driver.It provides device detection, device handling, input  device event processing and abstraction so minimize the amount of custom input code compositors need to provide the common set of functionality that users expect.\r\n\r\nSecurity Fix(es):\n\nIn libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution(CVE-2026-50292)","status":"published","published":"2026-06-12T11:11:34Z","modified":"2026-08-18T01:20:05.801425909Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"RHSA-2026:39296","title":"Red Hat Security Advisory: libinput security update","status":"published","published":"2026-07-15T10:10:15Z","modified":"2026-07-23T10:12:52Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:43290","title":"Red Hat Security Advisory: libinput security update","status":"published","published":"2026-07-23T10:14:23Z","modified":"2026-07-23T10:32:29.984900935Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RLSA-2026:39296","title":"Moderate: libinput security update","description":"libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.\n\nSecurity Fix(es):\n\n* libinput: local privilege escalation via crafted uinput devices (CVE-2026-50292)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-15T12:06:01.640959Z","modified":"2026-07-15T12:30:04.910632639Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-50292","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","status":"published","published":"2026-06-04T18:16:00Z","modified":"2026-09-14T22:11:26.784576911Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:33.391918Z"},{"id":"ALSA-2026:39296","title":"Moderate: libinput security update","description":"libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.  \n\nSecurity Fix(es):  \n\n  * libinput: local privilege escalation via crafted uinput devices (CVE-2026-50292)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-14T00:00:00Z","modified":"2026-10-29T11:30:29.725334099Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-89378","title":"CVE-2026-50292 affecting package libinput for versions less than 1.25.0-2","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","status":"published","published":"2026-06-04T18:16:32Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.436971Z"},{"id":"CLSA-2026-1783709526","title":"libinput: Fix of CVE-2026-50292","description":"- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection","status":"published","published":"2026-07-11T16:57:50Z","modified":"2026-10-26T09:31:42.103692137Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1784017931","title":"libinput: Fix of CVE-2026-50292","description":"- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection","status":"published","published":"2026-07-14T08:32:27Z","modified":"2026-10-26T09:30:25.76252562Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1784020479","title":"libinput: Fix of CVE-2026-50292","description":"- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection","status":"published","published":"2026-07-14T09:14:54Z","modified":"2026-10-26T09:31:15.739513711Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1792170117","title":"libinput: Fix of CVE-2026-50292","description":"- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection","status":"published","published":"2026-10-16T17:02:08Z","modified":"2026-10-26T09:31:46.656933586Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792174065","title":"libinput: Fix of CVE-2026-50292","description":"- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection","status":"published","published":"2026-10-16T18:07:57Z","modified":"2026-10-26T09:32:00.771541513Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"MGASA-2026-0208","title":"Updated libinput packages fix security vulnerability","description":"In libinput before 1.30.4 and 1.31.x before 1.31.3,\nlibinput-device-group unescaped phys output can inject udev properties\nleading to arbitrary root code execution\n","status":"published","published":"2026-06-15T15:56:35Z","modified":"2026-06-15T16:00:03.968496534Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:21091-1","title":"Security update for libinput","description":"This update for libinput fixes the following issues\n\n- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).\n","status":"published","published":"2026-06-18T20:52:13Z","modified":"2026-06-30T18:24:39.80118416Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22165-1","title":"Security update for libinput","description":"This update for libinput fixes the following issues\n\n- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).\n","status":"published","published":"2026-06-18T20:52:25Z","modified":"2026-06-24T18:24:16.618333728Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2523-1","title":"Security update for libinput","description":"This update for libinput fixes the following issues\n\n- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).\n","status":"published","published":"2026-06-23T08:52:47Z","modified":"2026-06-24T09:00:14.622931296Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2524-1","title":"Security update for libinput","description":"This update for libinput fixes the following issues\n\n- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).\n","status":"published","published":"2026-06-23T08:53:00Z","modified":"2026-06-24T09:00:11.850784542Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2529-1","title":"Security update for libinput","description":"This update for libinput fixes the following issues\n\n- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).\n","status":"published","published":"2026-06-23T10:02:38Z","modified":"2026-06-24T09:00:11.885047735Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2530-1","title":"Security update for libinput","description":"This update for libinput fixes the following issues\n\n- CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).\n","status":"published","published":"2026-06-23T10:03:18Z","modified":"2026-06-24T09:00:11.852611514Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"USN-8602-1","title":"libinput vulnerability","description":"It was discovered that libinput did not properly escape device\nproperties. A local attacker could possibly use this issue to inject\narbitrary udev properties and execute arbitrary code as root.","status":"published","published":"2026-07-23T17:11:39Z","modified":"2026-07-24T01:44:32.683282138Z","updated_at":"2026-11-02T16:58:25.103481Z"},{"id":"USN-8753-1","title":"libinput vulnerability","description":"It was discovered that libinput did not properly escape device\nproperties. A local attacker could possibly use this issue to inject\narbitrary udev properties and execute arbitrary code as root.","status":"published","published":"2026-09-14T12:28:51Z","modified":"2026-09-14T22:12:12.58958306Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}