A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinux | Nov 10, 2025 | Nov 6, 2025 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Nov 7, 2025 | Oct 30, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xwayland | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade tigervnc-iconsUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-module-debuginfoUpgrade tigervncUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-license | Nov 11, 2025 | Oct 29, 2025 |
| Debian | — | Upgrade xorg-server | Oct 30, 2025 | Oct 30, 2025 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwayland | Dec 10, 2025 | Nov 3, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory5 | Feb 20, 2026 | Feb 19, 2026 |
| Oracle_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-develUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade tigervncUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade tigervnc-license | Nov 4, 2025 | Oct 29, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-commonNo solution existsUpgrade tigervnc-serverUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade tigervnc-debugsourceUpgrade tigervnc | Nov 4, 2025 | Oct 29, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade tigervncUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xnest-debuginfo | Feb 5, 2026 | Nov 12, 2025 |
| Suse | — | Upgrade xwaylandUpgrade xorg-x11-serverUpgrade xwayland-develUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-source | Dec 5, 2025 | Nov 4, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwayland | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub