A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr | Apr 29, 2026 | Apr 27, 2026 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Apr 24, 2026 | Apr 23, 2026 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade tigervncUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade tigervnc-license | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xorg-debuginfo | May 4, 2026 | Apr 23, 2026 |
| Debian | — | Upgrade xorg-server | May 17, 2026 | May 17, 2026 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwayland | Apr 16, 2026 | Apr 14, 2026 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx | Apr 29, 2026 | Apr 23, 2026 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-debugsourceNo solution existsUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xephyr | Apr 29, 2026 | Apr 23, 2026 |
| Rocky_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-debugsourceUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade tigervncUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx | Apr 29, 2026 | Apr 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub