REDHAT-BUG-2485390: Medium severity libinput libinput vulnerability

Published Jun 5, 2026
·
Updated

A local attacker with /dev/uinput access can inject arbitrary udev properties through the libinput-device-group helper. Depending on downstream udev rules, this can result in root code execution (e.g. via injected REMOVECMD properties executed at device removal time). REMOVECMD is in the default udev rules and expected to be present on virtually all machines.

Affected Software

1 affected component
libinput libinput

Event History

Jun 5, 2026
Data Sourced
via Red Hat·08:18 AM
DescriptionSeverityAffected Software
Jan 29, 58408
Event
via Red Hat·08:36 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-2485390?

The severity of REDHAT-BUG-2485390 is rated as high (7).

2

How do I fix REDHAT-BUG-2485390?

To fix REDHAT-BUG-2485390, ensure that access to /dev/uinput is properly restricted to prevent unauthorized access.

3

What type of systems are affected by REDHAT-BUG-2485390?

REDHAT-BUG-2485390 impacts systems using the libinput library that grant access to /dev/uinput.

4

What is the potential impact of exploiting REDHAT-BUG-2485390?

Exploiting REDHAT-BUG-2485390 could potentially allow a local attacker to execute arbitrary root code.

5

Who is at risk from REDHAT-BUG-2485390?

Local users with access to /dev/uinput are at risk from REDHAT-BUG-2485390.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203