CVE-2026-50292: freedesktop libinput CRLF Injection
CVSS: 9.8v3.1CriticalAnalyzed
AliasesMGASA-2026-0208RHSA-2026:39296RHSA-2026:43290UBUNTU-CVE-2026-50292USN-8602-1USN-8753-1DEBIAN-CVE-2026-50292
Published 04-06-2026Last modified 04-06-2026
Vulnerability summary
CVE-2026-50292 is a critical (CVSS 9.8) CRLF Injection vulnerability in freedesktop libinput. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 43.8% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (NVD)EPSS score
0.53%
0%100%
Low · +0.22 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 6 · Duplicates 1 · Related 6Timeline
- 04-06-2026PublishedVulnerability first disclosed.
- 04-06-2026Last modifiedVulnerability information updated.
Description
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
CVSS metrics
5 scores · 5 sources · 1 versionCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources5 sources · 6.7–9.8
- CVE.orgCNA7.4HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · Red hatEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.53%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
+0.22 pp
From 0.31% on 20-09-2026
20-09-202620-10-2026
EPSS score0.53%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat7 products
- libinput< 0:1.30.1-2.el10_2 | < 0:1.26.1-5.el10_0.1
- libinput-debuginfo< 0:1.30.1-2.el10_2 | < 0:1.26.1-5.el10_0.1
- libinput-debugsource< 0:1.30.1-2.el10_2 | < 0:1.26.1-5.el10_0.1
- libinput-devel< 0:1.30.1-2.el10_2 | < 0:1.26.1-5.el10_0.1
- libinput-test-debuginfo< 0:1.30.1-2.el10_2 | < 0:1.26.1-5.el10_0.1
Debian1 product
- libinput< 1.22.1-1+deb12u1 | < 1.28.1-1+deb13u1 | < 1.31.3-1
Freedesktop1 product
- libinput< 1.30.4 | ≥ 1.31.0, < 1.31.3
Mageia1 product
- libinput< 1.23.0-2.1.mga9
Ubuntu1 product
- libinputAll versions (No fix recorded) | < 1.15.5-1ubuntu0.3+esm1 | < 1.20.0-1ubuntu0.4 | < 1.25.0-1ubuntu3.7 | < 1.31.1-1ubuntu1.2
5 vendors · 11 products
