VYPR

rpm package

opensuse/kbd&distro=openSUSE Leap 16.0

pkg:rpm/opensuse/kbd&distro=openSUSE%20Leap%2016.0

Vulnerabilities (1)

  • CVE-2026-72693HigAug 11, 2026
    affected < 2.7.1-160000.3.1fixed 2.7.1-160000.3.1

    `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged context. In the documented `kbrequest`/init usage, the ownership test in `authenticate_user()` relies on `stat("/proc//fd/0")`. `stat()` on `/proc//fd