CVE-2026-74676: Linux
EPSS: 0.2% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt_k_ioctl() enforce, allowing a process to change meta mode on a non-controlling console without authorization.
Affected products
- Linux Linux: from 2.6.12, before 5.10.265 (fixed in 5.10.265); from 5.11, before 5.15.216 (fixed in 5.15.216); from 5.16, before 6.1.183 (fixed in 6.1.183); from 6.2, before 6.6.152 (fixed in 6.6.152); from 6.7, before 6.12.104 (fixed in 6.12.104); from 6.13, before 6.18.45 (fixed in 6.18.45); …
Published 2026-08-22. Last modified 2026-08-25.