CVE-2026-74676

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt_k_ioctl() enforce, allowing a process to change meta mode on a non-controlling console without authorization.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 22, 2026
First seenAug 22, 2026

How to fix

Update
  • Linux Linux9f8cbaf4b774694dcc292e60509762483ebfd9ae, ddc4a8303347114e945b9e6e81b81d77855f7358, 1c5b67a1e2cb7d78dab321280f330b056e3bf437, d8ead5083b203d12b8319e7cb29cc6b8836e813f, 4671c3b79e337bbae28c2d79023dc642df012bde, a1c31e026c93e378e297a8df8328983d3013a59f, 7bf32337a7103ccb686cbd240324bf26225ef2d6, a7ad0034453ba4c353f9b8f810ee2569de33d283 or later

Affected products

ProductAffected versionsFixed in
Linux Linux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 9f8cbaf4b774694dcc292e60509762483ebfd9ae, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < ddc4a8303347114e945b9e6e81b81d77855f7358, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 1c5b67a1e2cb7d78dab321280f330b056e3bf437, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < d8ead5083b203d12b8319e7cb29cc6b8836e813f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 4671c3b79e337bbae28c2d79023dc642df012bde, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < a1c31e026c93e378e297a8df8328983d3013a59f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 7bf32337a7103ccb686cbd240324bf26225ef2d6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < a7ad0034453ba4c353f9b8f810ee2569de33d283, 2.6.129f8cbaf4b774694dcc292e60509762483ebfd9ae, ddc4a8303347114e945b9e6e81b81d77855f7358, 1c5b67a1e2cb7d78dab321280f330b056e3bf437, d8ead5083b203d12b8319e7cb29cc6b8836e813f, 4671c3b79e337bbae28c2d79023dc642df012bde, a1c31e026c93e378e297a8df8328983d3013a59f, 7bf32337a7103ccb686cbd240324bf26225ef2d6, a7ad0034453ba4c353f9b8f810ee2569de33d283

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-74676 · Linux · Dark Radar