CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

libinput — security advisories

1 advisorieslatest 2026-06-09⚡ RSS feed

Tracked libinput products:

⚡ Watch libinput

Get an email when a new libinput advisory drops — max one per day, one-click unsubscribe.

CVE-2026-50292: In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

highCVSS 7.4CVE-2026-50292msrc2026-06-09