CVE catalog

CVE-2026-50292

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.31% · Oct 25, 2026

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibinputsid1.31.3-1fixed
Debianlibinputforky1.31.3-1fixed
Debianlibinputtrixie1.28.1-1+deb13u1fixed
Debianlibinputtrixie-security1.28.1-1+deb13u1fixed
Debianlibinputbookworm1.22.1-1+deb12u1fixed
Debianlibinputbookworm-security1.22.1-1+deb12u1fixed
CpelibinputNot reported1.30.4fixed
CpelibinputNot reported1.31.3fixed
CpelibinputNot reported1.22.1-1+deb12u1fixed
Ubuntulibinputnoble1.25.0-1ubuntu3.7fixed
Ubuntulibinput-binnoble1.25.0-1ubuntu3.7fixed
Ubuntulibinput-devnoble1.25.0-1ubuntu3.7fixed
Ubuntulibinput-toolsnoble1.25.0-1ubuntu3.7fixed
Ubuntulibinput10noble1.25.0-1ubuntu3.7fixed
Ubuntulibinput24.041.23.0-2vulnerable
Ubuntulibinput24.041.23.0-2.1vulnerable
Ubuntulibinput24.041.25.0-1vulnerable
Ubuntulibinput24.041.25.0-1ubuntu1vulnerable
Ubuntulibinput24.041.25.0-1ubuntu2vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.1vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.2vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.3vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.4vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.5vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.6vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.7fixed
Ubuntulibinput26.041.28.1-1build1vulnerable
Ubuntulibinput26.041.28.1-1ubuntu2vulnerable
Ubuntulibinput26.041.30.0-1vulnerable
Ubuntulibinput26.041.30.1-1vulnerable
Ubuntulibinput26.041.31.0-1vulnerable
Ubuntulibinput26.041.31.0-1ubuntu0.1vulnerable
Ubuntulibinput26.041.31.1-1vulnerable
Ubuntulibinput26.041.31.1-1ubuntu1vulnerable
Ubuntulibinput26.041.31.1-1ubuntu1.1vulnerable
Ubuntulibinput26.041.31.1-1ubuntu1.2fixed
Ubuntulibinput16.041.0.1-1ubuntu1vulnerable
Ubuntulibinput16.041.1.0-1ubuntu1vulnerable
Ubuntulibinput16.041.1.0-1ubuntu2vulnerable
Ubuntulibinput16.041.1.3-1ubuntu1vulnerable
Ubuntulibinput16.041.1.4-1ubuntu1vulnerable
Ubuntulibinput16.041.1.4-1ubuntu2vulnerable
Ubuntulibinput16.041.2.2-1ubuntu1vulnerable
Ubuntulibinput16.041.2.3-1ubuntu1vulnerable
Ubuntulibinput16.041.6.3-1ubuntu1~16.04.1vulnerable
Ubuntulibinput18.041.8.2-1ubuntu2vulnerable
Ubuntulibinput18.041.9.2-1vulnerable
Ubuntulibinput18.041.9.3-1vulnerable
Ubuntulibinput18.041.9.4-1vulnerable
Ubuntulibinput18.041.9.4-2vulnerable
Ubuntulibinput18.041.9.4-2ubuntu1vulnerable
Ubuntulibinput18.041.10.0-1vulnerable
Ubuntulibinput18.041.10.1-1vulnerable
Ubuntulibinput18.041.10.3-2vulnerable
Ubuntulibinput18.041.10.4-1vulnerable
Ubuntulibinput18.041.10.4-1ubuntu0.18.04.1vulnerable
Ubuntulibinput18.041.10.4-1ubuntu0.18.04.2vulnerable
Ubuntulibinput18.041.10.4-1ubuntu0.18.04.3vulnerable
Ubuntulibinputpro1.14.1-2vulnerable
Ubuntulibinputpro1.14.2-1vulnerable
Ubuntulibinputpro1.14.3-1vulnerable
Ubuntulibinputpro1.14.3-1build1vulnerable
Ubuntulibinputpro1.15.1-1vulnerable
Ubuntulibinputpro1.15.2-1vulnerable
Ubuntulibinputpro1.15.3-1vulnerable
Ubuntulibinputpro1.15.4-1vulnerable
Ubuntulibinputpro1.15.5-1vulnerable
Ubuntulibinputpro1.15.5-1ubuntu0.1vulnerable
Ubuntulibinputpro1.15.5-1ubuntu0.2vulnerable
Ubuntulibinputpro1.15.5-1ubuntu0.3vulnerable
Ubuntulibinputpro1.15.5-1ubuntu0.3+esm1fixed
Ubuntulibinput22.041.18.1-1vulnerable
Ubuntulibinput22.041.19.2-1vulnerable
Ubuntulibinput22.041.19.3-1vulnerable
Ubuntulibinput22.041.19.3-2vulnerable
Ubuntulibinput22.041.20.0-1vulnerable
Ubuntulibinput22.041.20.0-1ubuntu0.1vulnerable
Ubuntulibinput22.041.20.0-1ubuntu0.2vulnerable
Ubuntulibinput22.041.20.0-1ubuntu0.3vulnerable
Ubuntulibinput22.041.20.0-1ubuntu0.4fixed
Ubuntulibinput24.041.23.0-2vulnerable
Ubuntulibinput24.041.23.0-2.1vulnerable
Ubuntulibinput24.041.25.0-1vulnerable
Ubuntulibinput24.041.25.0-1ubuntu1vulnerable
Ubuntulibinput24.041.25.0-1ubuntu2vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.1vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.2vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.3vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.4vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.5vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.6vulnerable
Ubuntulibinput24.041.25.0-1ubuntu3.7fixed
Ubuntulibinput25.101.27.1-1vulnerable
Ubuntulibinput25.101.28.1-1vulnerable
Ubuntulibinput25.101.28.1-1build1vulnerable
Ubuntulibinput25.101.28.1-1ubuntu0.1vulnerable
Ubuntulibinput25.101.28.1-1ubuntu0.2vulnerable
Ubuntulibinput25.101.28.1-1ubuntu0.3vulnerable
Ubuntulibinput25.101.28.1-1ubuntu0.4vulnerable
Ubuntulibinput26.041.28.1-1build1vulnerable
Ubuntulibinput26.041.28.1-1ubuntu2vulnerable
Ubuntulibinput26.041.30.0-1vulnerable
Ubuntulibinput26.041.30.1-1vulnerable
Ubuntulibinput26.041.31.0-1vulnerable
Ubuntulibinput26.041.31.0-1ubuntu0.1vulnerable
Ubuntulibinput26.041.31.1-1vulnerable
Ubuntulibinput26.041.31.1-1ubuntu1vulnerable
Ubuntulibinput26.041.31.1-1ubuntu1.1vulnerable
Ubuntulibinput26.041.31.1-1ubuntu1.2fixed
Ubuntulibinputpro1.14.1-2vulnerable
Ubuntulibinputpro1.14.2-1vulnerable
Ubuntulibinputpro1.14.3-1vulnerable
Ubuntulibinputpro1.14.3-1build1vulnerable
Ubuntulibinputpro1.15.1-1vulnerable
Ubuntulibinputpro1.15.2-1vulnerable
Ubuntulibinputpro1.15.3-1vulnerable
Ubuntulibinputpro1.15.4-1vulnerable
Ubuntulibinputpro1.15.5-1vulnerable
Ubuntulibinputpro1.15.5-1ubuntu0.1vulnerable
Ubuntulibinputpro1.15.5-1ubuntu0.2vulnerable
Ubuntulibinputpro1.15.5-1ubuntu0.3vulnerable
Ubuntulibinputpro1.15.5-1ubuntu0.3+esm1fixed
Ubuntulibinput22.041.18.1-1vulnerable
Ubuntulibinput22.041.19.2-1vulnerable
Ubuntulibinput22.041.19.3-1vulnerable
Ubuntulibinput22.041.19.3-2vulnerable
Ubuntulibinput22.041.20.0-1vulnerable
Ubuntulibinput22.041.20.0-1ubuntu0.1vulnerable
Ubuntulibinput22.041.20.0-1ubuntu0.2vulnerable
Ubuntulibinput22.041.20.0-1ubuntu0.3vulnerable
Ubuntulibinput22.041.20.0-1ubuntu0.4fixed
Opensuselibinputleap 16.01.28.1-160000.3.1fixed
Opensuselibinput-extraleap 16.01.28.1-160000.3.1fixed
Suselibinputlinux enterprise server 16.01.28.1-160000.3.1fixed
Suselibinputlinux enterprise server for sap applications 16.01.28.1-160000.3.1fixed
Suselibinputlinux enterprise high performance computing 15 sp5-espos1.21.0-150500.3.3.1fixed
Suselibinputlinux enterprise high performance computing 15 sp5-ltss1.21.0-150500.3.3.1fixed
Suselibinputlinux enterprise server 15 sp5-ltss1.21.0-150500.3.3.1fixed
Suselibinputlinux enterprise server for sap applications 15 sp51.21.0-150500.3.3.1fixed
Suselibinputlinux enterprise server 15 sp6-ltss1.25.0-150600.3.3.1fixed
Suselibinputlinux enterprise server for sap applications 15 sp61.25.0-150600.3.3.1fixed
Suselibinputlinux enterprise high performance computing 15 sp4-espos1.19.4-150400.3.3.1fixed
Suselibinputlinux enterprise high performance computing 15 sp4-ltss1.19.4-150400.3.3.1fixed
Suselibinputlinux enterprise server 15 sp4-ltss1.19.4-150400.3.3.1fixed
Suselibinputlinux enterprise server for sap applications 15 sp41.19.4-150400.3.3.1fixed
Suselibinputlinux enterprise module for basesystem 15 sp71.27.1-150700.3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibinputsourcesid1.31.3-1not yet assignedNot reportedNot reported
Debianlibinputsourceforky1.31.3-1not yet assignedNot reportedNot reported
Debianlibinputsourcetrixie1.28.1-1+deb13u1not yet assignedNot reportedNot reported
Debianlibinputsourcebookworm1.22.1-1+deb12u1not yet assignedNot reportedNot reported
CpelibinputcpeNot reported1.30.4Not reportedNot reportedNot reported
CpelibinputcpeNot reported1.31.3Not reportedNot reportedNot reported
CpelibinputcpeNot reported1.22.1-1+deb12u1Not reportedNot reportedNot reported
Ubuntulibinputdebnoble1.25.0-1ubuntu3.7Not reportedNot reportedNot reported
Ubuntulibinput-bindebnoble1.25.0-1ubuntu3.7Not reportedNot reportedNot reported
Ubuntulibinput-devdebnoble1.25.0-1ubuntu3.7Not reportedNot reportedNot reported
Ubuntulibinput-toolsdebnoble1.25.0-1ubuntu3.7Not reportedNot reportedNot reported
Ubuntulibinput10debnoble1.25.0-1ubuntu3.7Not reportedNot reportedNot reported
Ubuntulibinputdeb24.041.25.0-1ubuntu3.7Not reportedUSN-8753-1Not reported
Ubuntulibinputdeb26.041.31.1-1ubuntu1.2Not reportedUSN-8753-1Not reported
Ubuntulibinputdebpro1.15.5-1ubuntu0.3+esm1Not reportedUBUNTU-CVE-2026-50292Not reported
Ubuntulibinputdeb22.041.20.0-1ubuntu0.4Not reportedUBUNTU-CVE-2026-50292Not reported
Ubuntulibinputdeb24.041.25.0-1ubuntu3.7Not reportedUBUNTU-CVE-2026-50292Not reported
Ubuntulibinputdeb26.041.31.1-1ubuntu1.2Not reportedUBUNTU-CVE-2026-50292Not reported
Ubuntulibinputdebpro1.15.5-1ubuntu0.3+esm1Not reportedUSN-8602-1Not reported
Ubuntulibinputdeb22.041.20.0-1ubuntu0.4Not reportedUSN-8602-1Not reported
Opensuselibinputrpmleap 16.01.28.1-160000.3.1Not reportedOPENSUSE-SU-2026:21091-1Not reported
Opensuselibinput-extrarpmleap 16.01.28.1-160000.3.1Not reportedOPENSUSE-SU-2026:21091-1Not reported
Suselibinputrpmlinux enterprise server 16.01.28.1-160000.3.1Not reportedSUSE-SU-2026:22165-1Not reported
Suselibinputrpmlinux enterprise server for sap applications 16.01.28.1-160000.3.1Not reportedSUSE-SU-2026:22165-1Not reported
Suselibinputrpmlinux enterprise high performance computing 15 sp5-espos1.21.0-150500.3.3.1Not reportedSUSE-SU-2026:2523-1Not reported
Suselibinputrpmlinux enterprise high performance computing 15 sp5-ltss1.21.0-150500.3.3.1Not reportedSUSE-SU-2026:2523-1Not reported
Suselibinputrpmlinux enterprise server 15 sp5-ltss1.21.0-150500.3.3.1Not reportedSUSE-SU-2026:2523-1Not reported
Suselibinputrpmlinux enterprise server for sap applications 15 sp51.21.0-150500.3.3.1Not reportedSUSE-SU-2026:2523-1Not reported
Suselibinputrpmlinux enterprise server 15 sp6-ltss1.25.0-150600.3.3.1Not reportedSUSE-SU-2026:2529-1Not reported
Suselibinputrpmlinux enterprise server for sap applications 15 sp61.25.0-150600.3.3.1Not reportedSUSE-SU-2026:2529-1Not reported
Suselibinputrpmlinux enterprise high performance computing 15 sp4-espos1.19.4-150400.3.3.1Not reportedSUSE-SU-2026:2530-1Not reported
Suselibinputrpmlinux enterprise high performance computing 15 sp4-ltss1.19.4-150400.3.3.1Not reportedSUSE-SU-2026:2530-1Not reported
Suselibinputrpmlinux enterprise server 15 sp4-ltss1.19.4-150400.3.3.1Not reportedSUSE-SU-2026:2530-1Not reported
Suselibinputrpmlinux enterprise server for sap applications 15 sp41.19.4-150400.3.3.1Not reportedSUSE-SU-2026:2530-1Not reported
Suselibinputrpmlinux enterprise module for basesystem 15 sp71.27.1-150700.3.3.1Not reportedSUSE-SU-2026:2524-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libinput10]Fixed

    Source package: [libinput]

    Details (4)
    • 1.22.1-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

  • Source package: [libinput]

    Details (4)
    • 1.22.1-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

  • Source package: [libinput]

    Details (4)
    • 1.22.1-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

  • Source package: [libinput]

    Details (4)
    • 1.22.1-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

    • 1.22.1-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.22.1-1+deb12u1

      nvd · libinput · debian · bookworm; nvd · libinput · debian · 12

[Debian 13 (Trixie)]

  • [libinput10]Fixed

    Source package: [libinput]

    Details (4)
    • 1.28.1-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

  • Source package: [libinput]

    Details (4)
    • 1.28.1-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

  • Source package: [libinput]

    Details (4)
    • 1.28.1-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

  • Source package: [libinput]

    Details (4)
    • 1.28.1-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

    • 1.28.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.28.1-1+deb13u1

      nvd · libinput · debian · 13

Observed:

References