X.Org X11, Xwayland: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• High 7.8
  CVE-2026-33999

  Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling

  A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violat…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Apr 23, 2026
• High 7.8
  CVE-2026-34001

  Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption

  A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, l…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Apr 23, 2026
• High 7.8
  CVE-2026-34003

  Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access

  A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive infor…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Apr 23, 2026
• Medium 6.1
  CVE-2026-34000

  Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

  A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An att…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  May 5, 2026
• Medium 6.1
  CVE-2026-34002

  Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

  A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  May 5, 2026

Revision history

1. 2026-08-25 #34

   Neue Updates von Oracle Linux aufgenommen

2. 2026-08-16 #33

   Neue Updates von Gentoo aufgenommen

3. 2026-08-13 #32

   Neue Updates von Oracle Linux aufgenommen

4. 2026-08-12 #31

   Neue Updates von Debian aufgenommen

5. 2026-07-20 #30

   Neue Updates von Oracle Linux aufgenommen

6. 2026-07-16 #29

   Neue Updates von Oracle Linux aufgenommen

7. 2026-07-12 #28

   Neue Updates von Oracle Linux aufgenommen

8. 2026-07-08 #27

   Neue Updates von Oracle Linux aufgenommen

9. 2026-07-01 #26

   Neue Updates von IBM aufgenommen

10. 2026-06-28 #25

    Neue Updates von Oracle Linux aufgenommen

11. 2026-06-25 #24

    Neue Updates von Oracle Linux aufgenommen

12. 2026-06-24 #23

    Neue Updates von Oracle Linux aufgenommen

13. 2026-06-23 #22

    Neue Updates von Oracle Linux aufgenommen

14. 2026-06-09 #21

    Referenz(en) aufgenommen: ZDI-26-337, ZDI-CAN-28736, ZDI-26-335, ZDI-CAN-28706, ZDI-26-333, ZDI-CAN-28593, ZDI-26-336, ZDI-CAN-28737, ZDI-26-334, ZDI-CAN-28679

15. 2026-06-07 #20

    Neue Updates von Red Hat aufgenommen

16. 2026-06-04 #19

    Neue Updates von Red Hat aufgenommen

17. 2026-06-02 #18

    Neue Updates von Red Hat aufgenommen

18. 2026-06-01 #17

    Neue Updates von Red Hat aufgenommen

19. 2026-05-28 #16

    Neue Updates von Red Hat aufgenommen

20. 2026-05-27 #15

    Neue Updates von Red Hat aufgenommen

21. 2026-05-25 #14

    Neue Updates von Red Hat aufgenommen

22. 2026-05-19 #13

    Neue Updates von Red Hat aufgenommen

23. 2026-05-06 #12

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

24. 2026-05-05 #11

    Neue Updates von European Union Vulnerability Database und Oracle Linux aufgenommen

25. 2026-05-04 #10

    Neue Updates von Red Hat aufgenommen

References

• X.Org Security Advisory vom 2026-04-14
  https://lists.x.org/archives/xorg-announce/2026-April/003677.html
• xorg-server 21.1.22 announcement vom 2026-04-14
  https://lists.x.org/archives/xorg-announce/2026-April/003678.html
• xwayland 24.1.10 announcement vom 2026-04-14
  https://lists.x.org/archives/xorg-announce/2026-April/003679.html
• OpenBSD Errata 7.7 vom 2026-04-14
  https://www.openbsd.org/errata77.html
• OpenBSD Errata 7.8 vom 2026-04-14
  https://www.openbsd.org/errata78.html
• OpenBSD 7.8 Errata vom 2026-04-14
  http://www.openbsd.org/errata78.html
• SUSE Security Update SUSE-SU-2026:1330-1 vom 2026-04-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025341.html
• Fedora Security Advisory FEDORA-2026-2C6941716B vom 2026-04-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-2c6941716b
• Fedora Security Advisory FEDORA-2026-A7EC361237 vom 2026-04-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-a7ec361237
• Fedora Security Advisory FEDORA-2026-922A6D4E1A vom 2026-04-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-922a6d4e1a
• SUSE Security Update SUSE-SU-2026:1331-1 vom 2026-04-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025340.html
• SUSE Security Update SUSE-SU-2026:1332-1 vom 2026-04-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025339.html
• SUSE Security Update SUSE-SU-2026:1329-1 vom 2026-04-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025342.html
• SUSE Security Update SUSE-SU-2026:1328-1 vom 2026-04-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025343.html
• Fedora Security Advisory FEDORA-2026-CF9E55A7A0 vom 2026-04-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-cf9e55a7a0
• SUSE Security Update SUSE-SU-2026:1335-1 vom 2026-04-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025337.html
• Fedora Security Advisory FEDORA-2026-C0163D5A73 vom 2026-04-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-c0163d5a73
• Fedora Security Advisory FEDORA-2026-BEFF97A194 vom 2026-04-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-beff97a194
• Fedora Security Advisory FEDORA-2026-0B633ECC7C vom 2026-04-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-0b633ecc7c
• Fedora Security Advisory FEDORA-2026-492E92B32D vom 2026-04-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-492e92b32d
• SUSE Security Update SUSE-SU-2026:21211-1 vom 2026-04-21
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025518.html
• openSUSE Security Update OPENSUSE-SU-2026:20560-1 vom 2026-04-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TN3S4GNYGWSBWV7LFZR6J6U5G5J7VABN/
• openSUSE Security Update OPENSUSE-SU-2026:20544-1 vom 2026-04-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2BCVROV5CUEVEZC4LFOLJZTPMQ6ST7C4/
• Red Hat Security Advisory RHSA-2026:10739 vom 2026-04-27
  https://access.redhat.com/errata/RHSA-2026:10739
• Fedora Security Advisory FEDORA-2026-0174D1953A vom 2026-04-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-0174d1953a
• Rocky Linux Security Advisory RLSA-2026:10739 vom 2026-04-28
  https://errata.build.resf.org/RLSA-2026:10739
• Oracle Linux Security Advisory ELSA-2026-10739 vom 2026-04-27
  https://linux.oracle.com/errata/ELSA-2026-10739.html
• Red Hat Security Advisory RHSA-2026:11352 vom 2026-04-28
  https://access.redhat.com/errata/RHSA-2026:11352
• Oracle Linux Security Advisory ELSA-2026-11369 vom 2026-04-29
  https://linux.oracle.com/errata/ELSA-2026-11369.html
• Oracle Linux Security Advisory ELSA-2026-11352 vom 2026-04-28
  https://linux.oracle.com/errata/ELSA-2026-11352.html
• Red Hat Security Advisory RHSA-2026:11388 vom 2026-04-28
  https://access.redhat.com/errata/RHSA-2026:11388
• Red Hat Security Advisory RHSA-2026:11369 vom 2026-04-28
  https://access.redhat.com/errata/RHSA-2026:11369
• Oracle Linux Security Advisory ELSA-2026-11388 vom 2026-04-29
  https://linux.oracle.com/errata/ELSA-2026-11388.html
• IGEL Security Notice ISN-2026-15 vom 2026-04-29
  https://kb.igel.com/en/security-safety/current/isn-2026-15-x-org-vulnerabilities
• Red Hat Security Advisory RHSA-2026:11692 vom 2026-04-29
  https://access.redhat.com/errata/RHSA-2026:11692
• Rocky Linux Security Advisory RLSA-2026:11369 vom 2026-04-29
  https://errata.build.resf.org/RLSA-2026:11369
• Red Hat Security Advisory RHSA-2026:11656 vom 2026-04-29
  https://access.redhat.com/errata/RHSA-2026:11656
• Oracle Linux Security Advisory ELSA-2026-11692 vom 2026-04-30
  https://linux.oracle.com/errata/ELSA-2026-11692.html
• Amazon Linux Security Advisory ALAS2-2026-3273 vom 2026-04-30
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3273.html
• Amazon Linux Security Advisory ALAS2-2026-3268 vom 2026-04-30
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3268.html
• Rocky Linux Security Advisory RLSA-2026:11692 vom 2026-04-30
  https://errata.build.resf.org/RLSA-2026:11692
• Oracle Linux Security Advisory ELSA-2026-11656 vom 2026-05-01
  http://linux.oracle.com/errata/ELSA-2026-11656.html
• Rocky Linux Security Advisory RLSA-2026:11388 vom 2026-04-30
  https://errata.build.resf.org/RLSA-2026:11388
• Rocky Linux Security Advisory RLSA-2026:11352 vom 2026-05-01
  https://errata.build.resf.org/RLSA-2026:11352
• Rocky Linux Security Advisory RLSA-2026:11656 vom 2026-04-30
  https://errata.build.resf.org/RLSA-2026:11656
• Red Hat Security Advisory RHSA-2026:13414 vom 2026-05-04
  https://access.redhat.com/errata/RHSA-2026:13414
• Oracle Linux Security Advisory ELSA-2026-13414 vom 2026-05-06
  https://linux.oracle.com/errata/ELSA-2026-13414.html
• Rocky Linux Security Advisory RLSA-2026:13414 vom 2026-05-07
  https://errata.build.resf.org/RLSA-2026:13414
• Red Hat Security Advisory RHSA-2026:19344 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19344
• Red Hat Security Advisory RHSA-2026:19343 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:19343
• Red Hat Security Advisory RHSA-2026:19342 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19342
• Red Hat Security Advisory RHSA-2026:19125 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:19125
• Red Hat Security Advisory RHSA-2026:20562 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20562
• Red Hat Security Advisory RHSA-2026:20576 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20576
• Red Hat Security Advisory RHSA-2026:20590 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20590
• Red Hat Security Advisory RHSA-2026:20561 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20561
• Red Hat Security Advisory RHSA-2026:20575 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20575
• Red Hat Security Advisory RHSA-2026:20560 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20560
• Red Hat Security Advisory RHSA-2026:20563 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20563
• Red Hat Security Advisory RHSA-2026:20547 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20547
• Red Hat Security Advisory RHSA-2026:20558 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20558
• Red Hat Security Advisory RHSA-2026:20557 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20557
• Red Hat Security Advisory RHSA-2026:20555 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20555
• Red Hat Security Advisory RHSA-2026:21699 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21699
• Red Hat Security Advisory RHSA-2026:21712 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21712
• Red Hat Security Advisory RHSA-2026:21715 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21715
• Red Hat Security Advisory RHSA-2026:21716 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21716
• Red Hat Security Advisory RHSA-2026:21718 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21718
• Red Hat Security Advisory RHSA-2026:21741 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21741
• Red Hat Security Advisory RHSA-2026:21742 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21742
• Red Hat Security Advisory RHSA-2026:22424 vom 2026-06-02
  https://access.redhat.com/errata/RHSA-2026:22424
• Red Hat Security Advisory RHSA-2026:22456 vom 2026-06-02
  https://access.redhat.com/errata/RHSA-2026:22456
• Red Hat Security Advisory RHSA-2026:23254 vom 2026-06-04
  https://access.redhat.com/errata/RHSA-2026:23254
• Red Hat Security Advisory RHSA-2026:23496 vom 2026-06-05
  https://access.redhat.com/errata/RHSA-2026:23496
• Red Hat Security Advisory RHSA-2026:23255 vom 2026-06-04
  https://access.redhat.com/errata/RHSA-2026:23255
• Red Hat Security Advisory RHSA-2026:24341 vom 2026-06-08
  https://access.redhat.com/errata/RHSA-2026:24341
• Oracle Linux Security Advisory ELSA-2026-19342 vom 2026-06-24
  https://linux.oracle.com/errata/ELSA-2026-19342.html
• Oracle Linux Security Advisory ELSA-2026-26590 vom 2026-06-25
  https://linux.oracle.com/errata/ELSA-2026-26590.html
• Oracle Linux Security Advisory ELSA-2026-26610 vom 2026-06-26
  http://linux.oracle.com/errata/ELSA-2026-26610.html
• Oracle Linux Security Advisory ELSA-2026-19344 vom 2026-06-27
  https://linux.oracle.com/errata/ELSA-2026-19344.html