Summary
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled
certain memory operations. An attacker could use these issues to cause the
X Server to crash, leading to a denial of service, obtain sensitive
information, or possibly execute arbitrary code.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | xorg-server | 2:21.1.4-2ubuntu1.7~22.04.16 |
| Ubuntu · 22.04 LTS 22.04:LTS | xwayland | 2:22.1.1-1ubuntu0.20 |
| Ubuntu · 24.04 LTS 24.04:LTS | xorg-server | 2:21.1.12-1ubuntu1.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | xwayland | 2:23.2.6-1ubuntu0.7 |
| Ubuntu · 25.10 | xorg-server | 2:21.1.18-1ubuntu1.1 |
| Ubuntu · 25.10 | xwayland | 2:24.1.6-1ubuntu1.1 |
Vulnerabilities 3
-
High 7.3
Xorg: xmayland: use-after-free in xpresentnotify structure creation
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption…
-
High 7.3
Xorg: xwayland: use-after-free in xkb client resource removal
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memo…
-
High 7.3
Xorg: xmayland: value overflow in xkbsetcompatmap()
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overfl…