CVE-2026-74676

A flaw was found in the Linux kernel. A missing permission check in the KDSKBMETA ioctl (input/output control) allows a local process to modify the keyboard meta mode on a non-controlling console without proper authorization. This could enable an attacker to make unauthorized changes to system keyboard settings.

This vulnerability is rated as Low severity because it requires local system access and only permits an unauthorized process to alter keyboard meta key behavior on non-controlling consoles. The defect cannot be leveraged for privilege escalation, arbitrary code execution, or unauthorized data access. Most Red Hat Enterprise Linux environments run headless or through remote network shells without active virtual terminal sessions, which severely constrains the practical security impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.