Descriptionsystemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
plymouth (PTS)buster0.9.4-1.1fixed
sid, trixie24.004.60-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs


[stretch] - plymouth <no-dsa> (Minor issue)
[jessie] - plymouth <no-dsa> (Minor issue)
The fix for introduced a regression, cf. .
Issue was originally fixed for unstable in 241-4 but was reverted in 241-5
Upstream from systemd claimed originally it's not an issue in systemd, but
might revisit. Furthermore the issue might be fixed in the xorg xserver.
Tentative merge request:
Further analysis on the problem:
plymouth fix: (0.9.4)
The plymouth fix does not seem to be enough though, cf.

Search for package or bug name: Reporting problems