The Linux kernel lacked a permission check for the KDSKBMETA ioctl, which modifies keyboard meta mode. This oversight allows any process to change meta mode on a non‑controlling console without authorization, potentially disrupting user input behavior or enabling background interference. The flaw is similar to other keyboard‑setter ioctls, but without the required privilege gating.

The vulnerability affects the Linux kernel across all distributions, as the issue is inherent to the kernel’s vt subsystem. Specific version information is not provided, so any kernel build older than the fix should be considered impacted. No product‑specific version list is available.

The attack vector is likely local: a process that can invoke the ioctl (e.g., through /dev/tty or a kernel module) can exploit the missing check. Since the vulnerability is not listed in KEV and the EPSS score is <1%, it is not known to be actively exploited. However, the potential for privilege escalation and unwanted console changes warrants prompt remediation. The CVSS score is 5.5, indicating a medium severity and suggesting a moderate impact if an attacker controls the target system.