Local Privilege Escalation Vulnerability in kbd Package
Summary
ALSA-2026:78951: Moderate: kbd security update. Affects kbd versions < 2.0.4-11.el8_10.1. Fixed in 2.0.4-11.el8_10.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kbd package is essential for managing console behavior on Linux systems, including keyboard input, screen fonts, virtual terminals, and font files. It provides tools that allow users to interact with the system effectively. However, a recent security issue has been identified that could allow unauthorized users to gain elevated privileges.
Vulnerability Detail
The vulnerability arises from incorrect process owner verification in the openvt command of the kbd package. This flaw allows local users to escalate their privileges, potentially leading to passwordless root login. The issue is tracked under CVE-2026-72693, and it poses a significant risk as it could allow malicious users to gain full control over the system without proper authentication.
How To Fix
Minimum fixed version
2.0.4-11.el8_10.1
This is the first release that contains the fix.
sudo dnf update kbdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the openvt command by modifying permissions or using access control lists (ACLs) to limit its usage to trusted users only. However, this is not a permanent solution and updating the package is strongly advised.
Conclusion
The kbd package has a moderate security vulnerability that allows local privilege escalation due to incorrect process owner verification. It is crucial to update to the latest patched version to mitigate this risk. Users should also consider using Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for kbd →
FAQ
The kbd package provides tools for managing console behavior on Linux systems, including keyboard input and screen fonts.
The vulnerability allows local users to escalate their privileges, potentially enabling them to log in as root without a password.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update the package right away, consider implementing access controls to limit the use of the openvt command as a temporary measure.
More details can be found on the CVE page for CVE-2026-72693, which provides in-depth information about the vulnerability and its implications.
Related vulnerabilities
Recent vulnerabilities recorded for kbd.
