0.0
NA
CVE-2026-74676
vt: add permission check for KDSKBMETA ioctl
Description

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt_k_ioctl() enforce, allowing a process to change meta mode on a non-controlling console without authorization.

INFO

Published Date :

Aug. 22, 2026, 4:16 p.m.

Last Modified :

Aug. 22, 2026, 4:16 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2026-74676 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

Solution
Add permission checks to the KDSKBMETA ioctl in the Linux kernel.
  • Apply the kernel patch for KDSKBMETA ioctl.
  • Ensure proper authorization for console access.
  • Update your Linux kernel to the patched version.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-74676 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-74676 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-74676 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-74676 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 22, 2026

    Action Type Old Value New Value
    Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '9f8cbaf4b774694dcc292e60509762483ebfd9ae', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'ddc4a8303347114e945b9e6e81b81d77855f7358', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '1c5b67a1e2cb7d78dab321280f330b056e3bf437', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'd8ead5083b203d12b8319e7cb29cc6b8836e813f', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '4671c3b79e337bbae28c2d79023dc642df012bde', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'a1c31e026c93e378e297a8df8328983d3013a59f', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '7bf32337a7103ccb686cbd240324bf26225ef2d6', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'a7ad0034453ba4c353f9b8f810ee2569de33d283', 'versionType': 'git'}, {'status': 'affected', 'version': '0', 'lessThan': '5.10.265', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '5.15.216', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.1.183', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.6.152', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.12.104', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.18.45', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '7.1.9', 'versionType': 'semver'}], 'programFiles': ['drivers/tty/vt/vt_ioctl.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'unaffected', 'version': '5.10.265', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.216', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.183', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.152', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.104', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.45', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.9', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/tty/vt/vt_ioctl.c'], 'defaultStatus': 'affected'}]
    Added Description In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt_k_ioctl() enforce, allowing a process to change meta mode on a non-controlling console without authorization.
    Added Reference https://git.kernel.org/stable/c/1c5b67a1e2cb7d78dab321280f330b056e3bf437
    Added Reference https://git.kernel.org/stable/c/4671c3b79e337bbae28c2d79023dc642df012bde
    Added Reference https://git.kernel.org/stable/c/7bf32337a7103ccb686cbd240324bf26225ef2d6
    Added Reference https://git.kernel.org/stable/c/9f8cbaf4b774694dcc292e60509762483ebfd9ae
    Added Reference https://git.kernel.org/stable/c/a1c31e026c93e378e297a8df8328983d3013a59f
    Added Reference https://git.kernel.org/stable/c/a7ad0034453ba4c353f9b8f810ee2569de33d283
    Added Reference https://git.kernel.org/stable/c/d8ead5083b203d12b8319e7cb29cc6b8836e813f
    Added Reference https://git.kernel.org/stable/c/ddc4a8303347114e945b9e6e81b81d77855f7358
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.