A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervncUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-common | Nov 10, 2025 | Nov 6, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Nov 5, 2025 | Oct 30, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-serverUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade tigervncUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade tigervnc-server-module | Nov 11, 2025 | Oct 29, 2025 |
| Debian | — | Upgrade xorg-server | Oct 30, 2025 | Oct 30, 2025 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-server | Dec 10, 2025 | Nov 3, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade tigervnc | Nov 4, 2025 | Oct 29, 2025 |
| Redhat_linux | — | Upgrade tigervnc-server-moduleUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonNo solution existsUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-iconsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-serverUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-minimal | Nov 4, 2025 | Oct 29, 2025 |
| Rocky_linux | — | Upgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-devel | Feb 5, 2026 | Nov 12, 2025 |
| Suse | — | Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xwaylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-extraUpgrade xwayland-develUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server | Dec 5, 2025 | Nov 4, 2025 |
| Ubuntu | — | Upgrade xwaylandUpgrade xserver-xorg-core | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub