A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade tigervnc-serverUpgrade xorg-x11-server-devel | Nov 10, 2025 | Nov 6, 2025 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Nov 6, 2025 | Oct 30, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade tigervnc-server-appletUpgrade xorg-x11-server-Xvfb | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-selinuxUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade tigervnc-server-debuginfo | Nov 11, 2025 | Oct 29, 2025 |
| Debian | — | Upgrade xorg-server | Oct 30, 2025 | Oct 30, 2025 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwayland | Dec 10, 2025 | Nov 3, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory5 | Feb 20, 2026 | Feb 19, 2026 |
| Oracle_linux | — | Upgrade xorg-x11-server-develUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xephyr | Nov 4, 2025 | Oct 29, 2025 |
| Redhat_linux | — | Upgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-debuginfoNo solution existsUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade tigervnc-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-server-module-debuginfo | Nov 4, 2025 | Oct 29, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervncUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xvfb | Feb 5, 2026 | Nov 12, 2025 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-wayland | Dec 5, 2025 | Nov 4, 2025 |
| Ubuntu | — | Upgrade xwaylandUpgrade xserver-xorg-core | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub