A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade tigervncUpgrade xorg-x11-server-Xvfb | Nov 7, 2024 | Oct 30, 2024 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Oct 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade tigervncUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade xorg-x11-server-debuginfo | Nov 18, 2024 | Oct 30, 2024 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-devel | Feb 17, 2025 | Oct 29, 2024 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Oct 31, 2024 | Oct 31, 2024 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-server | Nov 20, 2024 | Nov 19, 2024 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Nov 18, 2024 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Jan 14, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | Feb 11, 2025 | Oct 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jan 15, 2025 | Oct 30, 2024 |
| Oracle_linux | — | Upgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-moduleUpgrade tigervnc-icons | Nov 11, 2024 | Oct 29, 2024 |
| Redhat_linux | — | Upgrade tigervnc-selinuxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoNo solution existsUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervncUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade tigervnc-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-debuginfo | Nov 6, 2024 | Oct 30, 2024 |
| Rocky_linux | — | Upgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade tigervnc-server-debuginfoUpgrade tigervncUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xnest | Nov 19, 2024 | Oct 30, 2024 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xwaylandUpgrade xorg-x11-server-extraUpgrade xwayland-develUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdk | Dec 31, 2024 | Oct 30, 2024 |
| Ubuntu | — | Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro) | Oct 31, 2024 | Oct 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub