Описание
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.31.3-1 |
| esm-infra-legacy/xenial | ignored | changes too intrusive |
| esm-infra/bionic | ignored | changes too intrusive |
| esm-infra/focal | released | 1.15.5-1ubuntu0.3+esm1 |
| jammy | released | 1.20.0-1ubuntu0.4 |
| noble | released | 1.25.0-1ubuntu3.7 |
| questing | ignored | end of life, was needs-triage |
| resolute | released | 1.31.1-1ubuntu1.2 |
| upstream | released | 1.31.3-1 |
Показывать по
EPSS
9.8 Critical
CVSS3
Связанные уязвимости
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-gr ...
EPSS
9.8 Critical
CVSS3