A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervncUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimalUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland | Nov 10, 2025 | Nov 6, 2025 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Nov 5, 2025 | Oct 30, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade tigervnc-server-appletUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade tigervnc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade tigervnc-iconsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-licenseUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xwayland | Nov 11, 2025 | Oct 29, 2025 |
| Debian | — | Upgrade xorg-server | Oct 30, 2025 | Oct 30, 2025 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwayland | Dec 10, 2025 | Nov 3, 2025 |
| Oracle_linux | — | Upgrade tigervncUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade tigervnc-server-module | Nov 4, 2025 | Oct 29, 2025 |
| Redhat_linux | — | Upgrade tigervnc-licenseUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-develNo solution existsUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-debugsourceUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade tigervnc-server-module-debuginfo | Nov 4, 2025 | Oct 29, 2025 |
| Rocky_linux | — | Upgrade tigervnc-server-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xwayland-devel | Feb 5, 2026 | Nov 12, 2025 |
| Suse | — | Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xwayland-develUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xwaylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-wayland | Dec 5, 2025 | Nov 4, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwayland | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub