Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specific system directories can exploit a dangling pointer vulnerability. This occurs when a garbage collection cleanup function is called, leaving a pointer that can then be printed to system logs. This could potentially expose sensitive data if the memory location is re-used, leading to information disclosure. For this exploit to work, Lua plugins must be enabled in libinput and loaded by the compositor.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-01 | 2 | Disclosure2 |
| 2026-04-02 | 1 | Disclosure1 |
libinput Security Advisory https://www.openwall.com/lists/oss-security/2026/04/02/1 CVE-2026-35093: Sandbox escape in libinput plugins CVE-2026-35094: Use after free allowing information leak in libinput plugins
Post summary
The advisory announces two new CVEs in libinput plugins—CVE-2026-35093 (sandbox escape) and CVE-2026-35094 (use‑after‑free information leak).
CVE-2026-35094 A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specific system directories can exploit a dangling pointer vulnerability. This occ… https://www.cve.org/CVERecord?id=CVE-2026-35094
Post summary
The statement announces a discovered flaw in libinput (CVE‑2026‑35094) involving a dangling pointer that can be exploited via Lua plugins, without mentioning patches, exploits, or real‑world attacks.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-35094 - Libinput: libinput: information disclosure via dangling pointer in lua plugin handling Intel Report: https://ift.tt/hIOJNbQ
Post summary
The alert announces CVE‑2026‑35094 affecting Libinput’s Lua plugin through a dangling pointer, leading to information disclosure, but provides no PoC, exploit code, patch information, or evidence of active exploitation.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | fedoraproject | fedora | 43 | - | - |
| OS | fedoraproject | fedora | 44 | - | - |
| App | freedesktop | libinput | - | - | - |