CVE-2026-74676

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt_k_ioctl() enforce, allowing a process to change meta mode on a non-controlling console without authorization.

Package Linux Kernel
Published 2026-08-22
Last modified 2026-08-22
Patch available
Yes

Affected versions

Fixed in 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9, 7.2 and their respective stable series.

Fixed in
✓ 5.10.265 5.10.x ✓ 5.15.216 5.15.x ✓ 6.1.183 6.1.x ✓ 6.6.152 6.6.x ✓ 6.12.104 6.12.x ✓ 6.18.45 6.18.x ✓ 7.1.9 7.1.x ✓ 7.2

Frequently asked questions

  • What is CVE-2026-74676?

    CVE-2026-74676 is a unscored severity Linux kernel vulnerability . CVE-2026-74676 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • Is there a patch available for CVE-2026-74676?

    Yes. CVE-2026-74676 has been patched. Fixed versions include 5.10.265, 5.15.216, 6.1.183 and others.

  • Is CVE-2026-74676 actively exploited?

    No. CVE-2026-74676 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.