A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not adding the new sync object, possibly causing a use-after-free when the alarm eventually triggers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade tigervncUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg | Mar 18, 2025 | Feb 25, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Feb 25, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg | Mar 26, 2025 | Feb 25, 2025 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debugsource | Mar 27, 2025 | Feb 25, 2025 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Mar 3, 2025 | Feb 25, 2025 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-serverUpgrade xephyrUpgrade xorg-nextserverUpgrade xwayland | Mar 7, 2025 | Mar 6, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Jun 13, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Jul 11, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jun 13, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | Jul 21, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade xorg-x11-server-help | Jul 1, 2025 | Feb 25, 2025 |
| Oracle_linux | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-appletUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-selinuxUpgrade tigervnc-server-module | Mar 12, 2025 | Feb 25, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-debugsourceNo solution existsUpgrade xorg-x11-server-Xdmx | Mar 11, 2025 | Feb 25, 2025 |
| Rocky_linux | — | Upgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xorg | May 8, 2025 | Feb 25, 2025 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-waylandUpgrade xwayland-develUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-extraUpgrade xwaylandUpgrade xorg-x11-server | Dec 5, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xwayland | Feb 26, 2025 | Feb 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub