A vulnerability in libinput, allowing privilege escalation in the system.
A vulnerability (CVE not assigned) has been found in the libinput library, which provides a unified input stack for Wayland and X.Org Server. This vulnerability allows local users to execute code with root privileges by connecting a virtual input device, emulated in user space via uinput or uhid. The issue has been resolved in releases 1.31.3 and 1.30.4. The vulnerability exists in the udev handler of libinput-device-group and is caused by a lack of proper […]
