An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervncUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade tigervnc-selinux | Mar 18, 2025 | Feb 25, 2025 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Feb 25, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx | Mar 26, 2025 | Feb 25, 2025 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfo | Mar 27, 2025 | Feb 25, 2025 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Mar 3, 2025 | Feb 25, 2025 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xwaylandUpgrade xorg-nextserverUpgrade xorg-vfbserver | Mar 7, 2025 | Mar 6, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Jun 13, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Jul 11, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jun 13, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | Jul 21, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade xorg-x11-server-help | Jul 1, 2025 | Feb 25, 2025 |
| Oracle_linux | — | Upgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XorgUpgrade tigervnc-license | Mar 12, 2025 | Feb 25, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-debuginfoNo solution existsUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-appletUpgrade tigervnc | Mar 11, 2025 | Feb 25, 2025 |
| Rocky_linux | — | Upgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-commonUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XorgUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimal-debuginfo | May 8, 2025 | Feb 25, 2025 |
| Suse | — | Upgrade xwayland-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xwaylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-source | Dec 5, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro) | Feb 26, 2025 | Feb 25, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub