Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Debian LTS: DLA-3217-1 Critical: g810-led Keyboard Data Risk

debian lts
Calendar Grey December 3, 2022
Scroller Debian Lts
Enhance g810-led modules to address vulnerabilities stemming from accessible udev configurations that may lead to unauthorized disclosure of private information.
g810-led, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system...
Topics%20covered

Topics Covered

security advisory critical debian data exposure keyboard g810-led udev rule

Summary

For Debian 10 buster, this problem has been fixed in version
0.3.3-2+deb10u1.

We recommend that you upgrade your g810-led packages.

For the detailed security status of g810-led please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/g810-led

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: g810-led
Version: 0.3.3-2+deb10u1
CVE ID: CVE-2022-46338
Debian Bug: 1024998

Topics%20covered

Topics Covered

security advisory critical debian data exposure keyboard g810-led udev rule

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.