A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-server-moduleUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb | Nov 10, 2025 | Nov 6, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Nov 7, 2025 | Oct 30, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade tigervnc-iconsUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade tigervnc-server-applet | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debugsource | Nov 11, 2025 | Oct 29, 2025 |
| Debian | — | Upgrade xorg-server | Oct 30, 2025 | Oct 30, 2025 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-server | Dec 10, 2025 | Nov 3, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory5 | Feb 20, 2026 | Feb 19, 2026 |
| Oracle_linux | — | Upgrade xorg-x11-server-develUpgrade tigervnc-iconsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-appletUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XephyrUpgrade tigervnc-license | Nov 4, 2025 | Oct 29, 2025 |
| Redhat_linux | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-licenseUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debugsourceNo solution existsUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc | Nov 4, 2025 | Oct 29, 2025 |
| Rocky_linux | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xorg-debuginfo | Feb 5, 2026 | Nov 12, 2025 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-extraUpgrade xwaylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-waylandUpgrade xwayland-develUpgrade xorg-x11-server | Dec 5, 2025 | Nov 4, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwayland | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub