CVE-2026-74676

vt: add permission check for KDSKBMETA ioctl

State: Published
Severity: Not scored
Published: Aug 22, 2026
Updated: Aug 25, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

vt: add permission check for KDSKBMETA ioctl

KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt_k_ioctl() enforce, allowing a process to change meta mode on a non-controlling console without authorization.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9f8cbaf4b774694dcc292e60509762483ebfd9aeAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ddc4a8303347114e945b9e6e81b81d77855f7358Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1c5b67a1e2cb7d78dab321280f330b056e3bf437Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d8ead5083b203d12b8319e7cb29cc6b8836e813fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4671c3b79e337bbae28c2d79023dc642df012bdeAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a1c31e026c93e378e297a8df8328983d3013a59fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7bf32337a7103ccb686cbd240324bf26225ef2d6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a7ad0034453ba4c353f9b8f810ee2569de33d283Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.152 through 6.6.Not affected 6.12.104 through 6.12.Not affected 6.18.45 through 6.18.Not affected 7.1.9 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9f8cbaf4b774694dcc292e60509762483ebfd9aeAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ddc4a8303347114e945b9e6e81b81d77855f7358Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1c5b67a1e2cb7d78dab321280f330b056e3bf437Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d8ead5083b203d12b8319e7cb29cc6b8836e813fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4671c3b79e337bbae28c2d79023dc642df012bdeAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a1c31e026c93e378e297a8df8328983d3013a59fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7bf32337a7103ccb686cbd240324bf26225ef2d6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a7ad0034453ba4c353f9b8f810ee2569de33d283Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.152 through 6.6.*Not affected
6.12.104 through 6.12.*Not affected
6.18.45 through 6.18.*Not affected
7.1.9 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.