CLSA-2026-1788265535

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788265535.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1788265535
Upstream
  • CVE-2026-72693
Published
2026-09-01T12:25:45Z
Modified
2026-10-26T09:31:28Z
Summary
kbd: Fix of CVE-2026-72693
Details
  • CVE-2026-72693: require a matching process owner and controlling terminal when openvt -u determines the current VT owner, instead of trusting the ownership of an inherited file descriptor, and refuse root as a pre-authenticated target. The old check could be satisfied by a process not owned by the VT owner, starting login -f for the wrong user without a password.
References

Affected packages

TuxCare:AlmaLinux:9.6 / kbd

Package

Name
kbd
Purl
pkg:rpm/tuxcare/kbd?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.0-11.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788265535.json"

TuxCare:AlmaLinux:9.6 / kbd-legacy

Package

Name
kbd-legacy
Purl
pkg:rpm/tuxcare/kbd-legacy?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.0-11.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788265535.json"

TuxCare:AlmaLinux:9.6 / kbd-misc

Package

Name
kbd-misc
Purl
pkg:rpm/tuxcare/kbd-misc?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.0-11.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788265535.json"