Advisories » MGASA-2026-0444

Updated kbd packages fix a security vulnerability

Publication date: 24 Sep 2026
Modification date: 24 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-72693

Description

Local privilege escalation in openvt via incorrect process owner
verification allowing passwordless root login. (CVE-2026-72693)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36239
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ROE6W66CNK3GP7353HAME3NKIXGBUZ64/
• https://bugzilla.redhat.com/show_bug.cgi?id=2462115
• https://www.cve.org/CVERecord?id=CVE-2026-72693

SRPMS

10/core

• kbd-2.9.0-1.1.mga10

9/core

• kbd-2.5.1-1.1.mga9