{
  "cveId": "CVE-2026-72693",
  "url": "https://patchblox.com/security/cve/CVE-2026-72693",
  "summary": "CVE-2026-72693 is fixed in 5 products on 1 platform, first by DEBIAN-CVE-2026-72693, released August 11, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login",
  "description": "\u0060openvt -u\u0060 is intended to identify the owner of the current VT and then execute \u0060login\u0060 as that user from a privileged context. In the documented \u0060kbrequest\u0060/init usage, the ownership test in \u0060authenticate_user()\u0060 relies on \u0060stat(\u0022/proc/\u003Cpid\u003E/fd/0\u0022)\u0060. \u0060stat()\u0060 on \u0060/proc/\u003Cpid\u003E/fd/0\u0060 follows the symlink to the underlying TTY device node. As a result, \u0060buf.st_uid\u0060 reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to \u0060root\u0060 or the getty owner after logout while an unprivileged process still has \u0060fd 0\u0060 attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the \u0060-u\u0060 path executes a passwordless login as the selected user. In the documented \u0060kbrequest\u0060/init deployment using \u0060openvt -us\u0060, this can result in passwordless \u0060login -f root\u0060 on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use \u0060openvt -u\u0060 from a privileged \u0060kbrequest\u0060/init path.",
  "published": "2026-08-11T06:58:59Z",
  "severity": "Important",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "cwe": "Improper Access Control",
  "epss": 0.00148,
  "epssPercentile": 0.03987,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72693",
  "fixes": [
    {
      "platform": "linux",
      "product": "kbd",
      "release": "Debian 14",
      "fixedVersion": "2.10.0-1",
      "fix": "DEBIAN-CVE-2026-72693",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-72693",
      "released": "2026-08-11T09:17:14Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "Fedora 43",
      "fixedVersion": "2.8.0-4.fc43",
      "fix": "FEDORA-2026-3A1183DF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-3a1183df4c",
      "released": "2026-08-27T08:42:03Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "RHEL 10",
      "fixedVersion": "2.6.4-8.el10_2",
      "fix": "RHSA-2026:57597",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-57597",
      "released": "2026-08-21T23:39:10Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-11.el8_10.1",
      "fix": "RHSA-2026:78951",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-78951",
      "released": "2026-10-09T22:36:17Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "RHEL 9",
      "fixedVersion": "0:2.4.0-12.el9_8",
      "fix": "RHSA-2026:57610",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-57610",
      "released": "2026-08-21T23:39:10Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "almalinux 10",
      "fixedVersion": "2.6.4-8.el10_2",
      "fix": "ALSA-2026:57597",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-57597",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "almalinux 8",
      "fixedVersion": "2.0.4-11.el8_10.1",
      "fix": "ALSA-2026:78951",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-78951",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "almalinux 9",
      "fixedVersion": "2.4.0-12.el9_8",
      "fix": "ALSA-2026:57610",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-57610",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "amzn 2023",
      "fixedVersion": "2.4.0-2.amzn2023.0.4",
      "fix": "ALAS2023-2026-2109",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2109",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "ol 10",
      "fixedVersion": "0:2.6.4-8.el10_2",
      "fix": "ELSA-2026-57597",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-57597",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "ol 8",
      "fixedVersion": "0:2.0.4-11.el8_10.1",
      "fix": "ELSA-2026-78951",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-78951",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "ol 9",
      "fixedVersion": "0:2.4.0-12.el9_8",
      "fix": "ELSA-2026-57610",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-57610",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.7.1-160000.3.1",
      "fix": "OPENSUSE-SU-2026:21939-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21939-1",
      "released": "2026-09-23T19:45:21Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "rocky 10",
      "fixedVersion": "0:2.6.4-8.el10_2",
      "fix": "RLSA-2026:57597",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-57597",
      "released": "2026-08-21T12:08:17Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "rocky 8",
      "fixedVersion": "0:2.0.4-11.el8_10.1",
      "fix": "RLSA-2026:78951",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-78951",
      "released": "2026-11-07T00:39:57Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "rocky 9",
      "fixedVersion": "0:2.4.0-12.el9_8",
      "fix": "RLSA-2026:57610",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-57610",
      "released": "2026-08-21T06:06:25Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "sles 15.6",
      "fixedVersion": "2.4.0-150400.5.12.1",
      "fix": "SUSE-SU-2026:4207-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4207-1",
      "released": "2026-09-16T08:22:44Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "sles 15.7",
      "fixedVersion": "2.4.0-150700.15.10.1",
      "fix": "SUSE-SU-2026:4211-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4211-1",
      "released": "2026-09-16T11:51:08Z"
    },
    {
      "platform": "linux",
      "product": "kbd",
      "release": "sles 16.0",
      "fixedVersion": "2.7.1-160000.3.1",
      "fix": "SUSE-SU-2026:23911-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23911-1",
      "released": "2026-09-23T19:47:23Z"
    },
    {
      "platform": "linux",
      "product": "kbd-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "2.8.0-4.fc43",
      "fix": "FEDORA-2026-3A1183DF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-3a1183df4c",
      "released": "2026-08-27T08:42:03Z"
    },
    {
      "platform": "linux",
      "product": "kbd-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.4.0-2.amzn2023.0.4",
      "fix": "ALAS2023-2026-2109",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2109",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-debugsource",
      "release": "Fedora 43",
      "fixedVersion": "2.8.0-4.fc43",
      "fix": "FEDORA-2026-3A1183DF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-3a1183df4c",
      "released": "2026-08-27T08:42:03Z"
    },
    {
      "platform": "linux",
      "product": "kbd-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "2.4.0-2.amzn2023.0.4",
      "fix": "ALAS2023-2026-2109",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2109",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "Fedora 43",
      "fixedVersion": "2.8.0-4.fc43",
      "fix": "FEDORA-2026-3A1183DF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-3a1183df4c",
      "released": "2026-08-27T08:42:03Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-11.el8_10.1",
      "fix": "RHSA-2026:78951",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-78951",
      "released": "2026-10-09T22:36:17Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "RHEL 9",
      "fixedVersion": "0:2.4.0-12.el9_8",
      "fix": "RHSA-2026:57610",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-57610",
      "released": "2026-08-21T23:39:10Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "almalinux 10",
      "fixedVersion": "2.6.4-8.el10_2",
      "fix": "ALSA-2026:57597",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-57597",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "almalinux 8",
      "fixedVersion": "2.0.4-11.el8_10.1",
      "fix": "ALSA-2026:78951",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-78951",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "almalinux 9",
      "fixedVersion": "2.4.0-12.el9_8",
      "fix": "ALSA-2026:57610",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-57610",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "amzn 2023",
      "fixedVersion": "2.4.0-2.amzn2023.0.4",
      "fix": "ALAS2023-2026-2109",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2109",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "ol 10",
      "fixedVersion": "0:2.6.4-8.el10_2",
      "fix": "ELSA-2026-57597",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-57597",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "ol 8",
      "fixedVersion": "0:2.0.4-11.el8_10.1",
      "fix": "ELSA-2026-78951",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-78951",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-legacy",
      "release": "ol 9",
      "fixedVersion": "0:2.4.0-12.el9_8",
      "fix": "ELSA-2026-57610",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-57610",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "Fedora 43",
      "fixedVersion": "2.8.0-4.fc43",
      "fix": "FEDORA-2026-3A1183DF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-3a1183df4c",
      "released": "2026-08-27T08:42:03Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-11.el8_10.1",
      "fix": "RHSA-2026:78951",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-78951",
      "released": "2026-10-09T22:36:17Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "RHEL 9",
      "fixedVersion": "0:2.4.0-12.el9_8",
      "fix": "RHSA-2026:57610",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-57610",
      "released": "2026-08-21T23:39:10Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "almalinux 10",
      "fixedVersion": "2.6.4-8.el10_2",
      "fix": "ALSA-2026:57597",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-57597",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "almalinux 8",
      "fixedVersion": "2.0.4-11.el8_10.1",
      "fix": "ALSA-2026:78951",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-78951",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "almalinux 9",
      "fixedVersion": "2.4.0-12.el9_8",
      "fix": "ALSA-2026:57610",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-57610",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "amzn 2023",
      "fixedVersion": "2.4.0-2.amzn2023.0.4",
      "fix": "ALAS2023-2026-2109",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2109",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "ol 10",
      "fixedVersion": "0:2.6.4-8.el10_2",
      "fix": "ELSA-2026-57597",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-57597",
      "released": "2026-08-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "ol 8",
      "fixedVersion": "0:2.0.4-11.el8_10.1",
      "fix": "ELSA-2026-78951",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-78951",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kbd-misc",
      "release": "ol 9",
      "fixedVersion": "0:2.4.0-12.el9_8",
      "fix": "ELSA-2026-57610",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-57610",
      "released": "2026-08-20T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}