A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade tigervnc-selinuxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimal | Mar 18, 2025 | Feb 25, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Feb 25, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland | Mar 26, 2025 | Feb 25, 2025 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xorg | Mar 27, 2025 | Feb 25, 2025 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Mar 3, 2025 | Feb 25, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-nextserverUpgrade xephyrUpgrade xorg-serverUpgrade xwayland | Mar 7, 2025 | Mar 6, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Jun 13, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Jul 11, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jun 13, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | Jul 21, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade xorg-x11-server-help | Jul 1, 2025 | Feb 25, 2025 |
| Oracle_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade tigervncUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinuxUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-common | Mar 12, 2025 | Feb 25, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xdmx-debuginfoNo solution existsUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland | Mar 11, 2025 | Feb 25, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xnest | May 8, 2025 | Feb 25, 2025 |
| Suse | — | Upgrade libx11-dataUpgrade libx11-xcb1Upgrade xorg-x11-server-sdkUpgrade libx11-6Upgrade libx11-6-32bitUpgrade xwayland-develUpgrade xorg-x11-serverUpgrade libX11-devel-docUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade libx11-develUpgrade libx11-devel-32bitUpgrade xwaylandUpgrade xorg-x11-server-sourceUpgrade libx11-xcb1-32bitUpgrade xorg-x11-server-Xvfb | Mar 3, 2025 | Feb 25, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro) | Feb 26, 2025 | Feb 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub