Red Hat Security AdvisoryRHSA-2026:43290
libinput security update
Released 2026-07-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) libinput-1.26.1-5.el10_0.1, libinput-utils-1.26.1-5.el10_0.1
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) libinput-devel-1.26.1-5.el10_0.1
Fixes 1 record
Priority HIGH 76
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-06-04 · Partial fix · 1.30.4, 1.31.3 CWE-93
