CVE-2012-0064: xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which a...

Security readout for executives and security teams

This is a physical-access screen-lock bypass in older X.Org keyboard configuration. Debug key combinations were enabled by default and could disrupt a locked screen’s input control, allowing someone at the keyboard to bypass the locker. Business risk is mainly for legacy Linux or Unix desktops, lab systems, kiosks, and unattended workstations. Exposure is likely limited to systems running xkeyboard-config before 2.5 in affected X.Org deployments. Prioritize shared desktops, terminals, labs, kiosks, and systems where users leave sessions locked. The bundle does not identify precise downstream OS package versions, so confirm through vendor package data. Treat as a targeted physical-access risk, not an internet-scale emergency. Prioritize legacy shared desktops, kiosks, and sensitive workstations where a screen lock is relied on as the main protection against nearby users. Mitigation focus: Upgrade xkeyboard-config to 2.5 or a vendor-fixed package.; Check OS vendor advisories for backported fixes and package names.; Reduce unattended logged-in sessions on shared or public systems..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.