{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35093.json"
      }
    ],
    "title": "libinput: libinput: Unauthorized code execution and information disclosure through Lua bytecode plugins",
    "tracking": {
      "current_release_date": "2026-06-30T03:53:24+00:00",
      "generator": {
        "date": "2026-06-30T03:53:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "CVE-2026-35093",
      "initial_release_date": "2026-04-01T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-04-01T00:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-01T15:08:49+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-06-30T03:53:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 10",
                "product": {
                  "name": "Red Hat Enterprise Linux 10",
                  "product_id": "red_hat_enterprise_linux_10",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 10"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 7",
                "product": {
                  "name": "Red Hat Enterprise Linux 7",
                  "product_id": "red_hat_enterprise_linux_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 7"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 8",
                "product": {
                  "name": "Red Hat Enterprise Linux 8",
                  "product_id": "red_hat_enterprise_linux_8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 8"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 9",
                "product": {
                  "name": "Red Hat Enterprise Linux 9",
                  "product_id": "red_hat_enterprise_linux_9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 9"
          },
          {
            "category": "product_version",
            "name": "libinput-utils",
            "product": {
              "name": "libinput-utils",
              "product_id": "libinput-utils",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libinput-utils"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libinput.src",
            "product": {
              "name": "libinput.src",
              "product_id": "libinput.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libinput?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libinput-devel",
            "product": {
              "name": "libinput-devel",
              "product_id": "libinput-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libinput-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libinput",
            "product": {
              "name": "libinput",
              "product_id": "libinput",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libinput"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput-devel as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:libinput-devel"
        },
        "product_reference": "libinput-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput-utils as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:libinput-utils"
        },
        "product_reference": "libinput-utils",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput.src as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:libinput.src"
        },
        "product_reference": "libinput.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:libinput"
        },
        "product_reference": "libinput",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput-devel as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:libinput-devel"
        },
        "product_reference": "libinput-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput.src as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:libinput.src"
        },
        "product_reference": "libinput.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:libinput"
        },
        "product_reference": "libinput",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput-devel as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:libinput-devel"
        },
        "product_reference": "libinput-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput-utils as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:libinput-utils"
        },
        "product_reference": "libinput-utils",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput.src as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:libinput.src"
        },
        "product_reference": "libinput.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:libinput"
        },
        "product_reference": "libinput",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput-devel as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:libinput-devel"
        },
        "product_reference": "libinput-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput-utils as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:libinput-utils"
        },
        "product_reference": "libinput-utils",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libinput.src as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:libinput.src"
        },
        "product_reference": "libinput.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Koen Tange"
          ],
          "organization": "monokles.eu"
        }
      ],
      "cve": "CVE-2026-35093",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code ('Code Injection')"
      },
      "discovery_date": "2026-04-01T13:31:20.352000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "red_hat_enterprise_linux_10:libinput-devel",
            "red_hat_enterprise_linux_10:libinput-utils",
            "red_hat_enterprise_linux_10:libinput.src",
            "red_hat_enterprise_linux_8:libinput",
            "red_hat_enterprise_linux_8:libinput-devel",
            "red_hat_enterprise_linux_8:libinput-utils",
            "red_hat_enterprise_linux_8:libinput.src",
            "red_hat_enterprise_linux_9:libinput",
            "red_hat_enterprise_linux_9:libinput-devel",
            "red_hat_enterprise_linux_9:libinput-utils",
            "red_hat_enterprise_linux_9:libinput.src"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2453839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain system or user configuration directories can bypass security restrictions. This allows the attacker to run unauthorized code with the same permissions as the program using libinput, such as a graphical compositor. This could lead to the attacker monitoring keyboard input and sending that information to an external location.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libinput: libinput: Unauthorized code execution and information disclosure through Lua bytecode plugins",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in libinput allows a local attacker to achieve unauthorized code execution and information disclosure. Exploitation requires the attacker to place a specially crafted Lua bytecode file in a system or user configuration directory, and for Lua plugins to be enabled and loaded by the graphical compositor.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "known_affected": [
          "red_hat_enterprise_linux_7:libinput",
          "red_hat_enterprise_linux_7:libinput-devel",
          "red_hat_enterprise_linux_7:libinput.src"
        ],
        "known_not_affected": [
          "red_hat_enterprise_linux_10:libinput-devel",
          "red_hat_enterprise_linux_10:libinput-utils",
          "red_hat_enterprise_linux_10:libinput.src",
          "red_hat_enterprise_linux_8:libinput",
          "red_hat_enterprise_linux_8:libinput-devel",
          "red_hat_enterprise_linux_8:libinput-utils",
          "red_hat_enterprise_linux_8:libinput.src",
          "red_hat_enterprise_linux_9:libinput",
          "red_hat_enterprise_linux_9:libinput-devel",
          "red_hat_enterprise_linux_9:libinput-utils",
          "red_hat_enterprise_linux_9:libinput.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35093"
        },
        {
          "category": "external",
          "summary": "RHBZ#2453839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35093",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35093"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35093",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35093"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/libinput/libinput/-/work_items/1271",
          "url": "https://gitlab.freedesktop.org/libinput/libinput/-/work_items/1271"
        }
      ],
      "release_date": "2026-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "red_hat_enterprise_linux_7:libinput",
            "red_hat_enterprise_linux_7:libinput-devel",
            "red_hat_enterprise_linux_7:libinput.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "red_hat_enterprise_linux_10:libinput-devel",
            "red_hat_enterprise_linux_10:libinput-utils",
            "red_hat_enterprise_linux_10:libinput.src",
            "red_hat_enterprise_linux_7:libinput",
            "red_hat_enterprise_linux_7:libinput-devel",
            "red_hat_enterprise_linux_7:libinput.src",
            "red_hat_enterprise_linux_8:libinput",
            "red_hat_enterprise_linux_8:libinput-devel",
            "red_hat_enterprise_linux_8:libinput-utils",
            "red_hat_enterprise_linux_8:libinput.src",
            "red_hat_enterprise_linux_9:libinput",
            "red_hat_enterprise_linux_9:libinput-devel",
            "red_hat_enterprise_linux_9:libinput-utils",
            "red_hat_enterprise_linux_9:libinput.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "red_hat_enterprise_linux_10:libinput-devel",
            "red_hat_enterprise_linux_10:libinput-utils",
            "red_hat_enterprise_linux_10:libinput.src",
            "red_hat_enterprise_linux_7:libinput",
            "red_hat_enterprise_linux_7:libinput-devel",
            "red_hat_enterprise_linux_7:libinput.src",
            "red_hat_enterprise_linux_8:libinput",
            "red_hat_enterprise_linux_8:libinput-devel",
            "red_hat_enterprise_linux_8:libinput-utils",
            "red_hat_enterprise_linux_8:libinput.src",
            "red_hat_enterprise_linux_9:libinput",
            "red_hat_enterprise_linux_9:libinput-devel",
            "red_hat_enterprise_linux_9:libinput-utils",
            "red_hat_enterprise_linux_9:libinput.src"
          ]
        }
      ],
      "title": "libinput: libinput: Unauthorized code execution and information disclosure through Lua bytecode plugins"
    }
  ]
}