A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervncUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-devel | Nov 10, 2025 | Nov 6, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Nov 5, 2025 | Oct 30, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-develUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade xorg-x11-server-Xnest | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-source | Nov 11, 2025 | Oct 29, 2025 |
| Debian | — | Upgrade xorg-server | Oct 30, 2025 | Oct 30, 2025 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-server | Dec 10, 2025 | Nov 3, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade xorg-x11-server-XorgUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade tigervncUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-source | Nov 4, 2025 | Oct 29, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoNo solution existsUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervncUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xdmx-debuginfo | Nov 4, 2025 | Oct 29, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimal-debuginfo | Feb 5, 2026 | Nov 12, 2025 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xwaylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xwayland-devel | Dec 5, 2025 | Nov 4, 2025 |
| Ubuntu | — | Upgrade xwaylandUpgrade xserver-xorg-core | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub