CVE-2026-74676

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

vt: add permission check for KDSKBMETA ioctl

KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt_k_ioctl() enforce, allowing a process to change meta mode on a non-controlling console without authorization.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 9f8cbaf4b774694dcc292e60509762483ebfd9ae; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ddc4a8303347114e945b9e6e81b81d77855f7358; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1c5b67a1e2cb7d78dab321280f330b056e3bf437; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < d8ead5083b203d12b8319e7cb29cc6b8836e813f; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 4671c3b79e337bbae28c2d79023dc642df012bde; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a1c31e026c93e378e297a8df8328983d3013a59f; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7bf32337a7103ccb686cbd240324bf26225ef2d6; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a7ad0034453ba4c353f9b8f810ee2569de33d283
LinuxLinux2.6.12

References

Timeline

Published
Aug 22, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-74677In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier_work UAF on disconnect ipheth_sndbulk_caCVE-2026-746787.5In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() When the inCVE-2026-74679In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Use unsigned int for ndp_index The variable ndp_inCVE-2026-74687.3A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-aCVE-2026-74680In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() If cxaCVE-2026-74681In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_leCVE-2026-74682In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs data_ep_set_parCVE-2026-74683In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks TheCVE-2026-746847.1In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb->dev before parsing virtio net header in tap_get_userCVE-2026-74685In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Clamp negative current limits When a negative value iCVE-2026-74686In the Linux kernel, the following vulnerability has been resolved: rqspinlock: Reset tail when preserving queue on deadlock Currently, thCVE-2026-746877.8In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during teardown at91_ping(
CVE-2026-74676: Unscored | Vulnix