Red Hat Security AdvisoryRHSA-2026:39296
libinput security update
Released 2026-07-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) libinput-1.30.1-2.el10_2, libinput-utils-1.30.1-2.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libinput-devel-1.30.1-2.el10_2
Fixes 1 record
Priority HIGH 76
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-06-04 · Partial fix · 1.30.4, 1.31.3 CWE-93
