Skip to content
OpenAdvisories
High · 7.3 CVE-2025-62229 EUVD-2025-36899GHSA-49pm-cgmh-hw25

Xorg: xmayland: use-after-free in xpresentnotify structure creation

Published Oct 30, 2025 · Updated Nov 5, 2026 · Assigned by redhat

Description

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.

Affected products

VendorProductAffectedFixed
X.Org Xwayland 1.15.0 – < 24.1.9 24.1.9
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION — —
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support — —
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support — —
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On — —
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support — —
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service — —
Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service — —
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support — —
Red Hat Red Hat Enterprise Linux 6 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 xorg-server 2:21.1.20-1 —
Debian 14 xwayland 2:24.1.9-1 —
Debian 13 xorg-server 2:21.1.16-1.3+deb13u1 DSA-6044-1
Debian 13 xwayland No fix yet —
Debian 12 xorg-server 2:21.1.7-3+deb12u11 DSA-6044-1
Debian 12 xwayland No fix yet —
Debian 11 xorg-server 2:1.20.11-1+deb11u17 DLA-4353-1
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS xorg-server 2:21.1.21-1ubuntu1 —
Ubuntu 26.04 LTS xwayland 2:24.1.9-1 —
Ubuntu 25.10 xorg-server 2:21.1.18-1ubuntu1.1 USN-7846-1
Ubuntu 25.10 xwayland 2:24.1.6-1ubuntu1.1 USN-7846-1
Ubuntu 24.04 LTS xorg-server 2:21.1.12-1ubuntu1.5 USN-7846-1
Ubuntu 24.04 LTS xwayland 2:23.2.6-1ubuntu0.7 USN-7846-1
Ubuntu 22.04 LTS xorg-server 2:21.1.4-2ubuntu1.7~22.04.16 USN-7846-1
Ubuntu 22.04 LTS xwayland 2:22.1.1-1ubuntu0.20 USN-7846-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS xorg-server No fix yet —
Ubuntu Pro 18.04 LTS xorg-server +1 No fix yet —
Ubuntu Pro 16.04 LTS xorg-server +1 No fix yet —
Ubuntu Pro 14.04 LTS xorg-server No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 xorg-x11-server-Xwayland +1 24.1.5-5.el10_0 RHSA-2025:21035, RHSA-2025:19435
RHEL 9 tigervnc +6 1.14.1-9.el9_6 RHSA-2025:20958, RHSA-2025:19489
RHEL 9 xorg-x11-server +8 1.20.11-32.el9_6 RHSA-2025:20961, RHSA-2025:19433
RHEL 9 xorg-x11-server-Xwayland +1 23.2.7-5.el9_6 RHSA-2025:20960, RHSA-2025:19623
RHEL 8 tigervnc +6 1.15.0-8.el8_10 RHSA-2025:19909
RHEL 8 xorg-x11-server +8 1.20.11-27.el8_10 RHSA-2025:19434
RHEL 8 xorg-x11-server-Xwayland 21.1.3-19.el8_10 RHSA-2025:19432
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS tigervnc +6 1.13.1-8.el9_4.8 RHSA-2025:22051
RHEL 9.4 EUS xorg-x11-server +8 1.20.11-27.el9_4 RHSA-2025:22742
RHEL 9.4 EUS xorg-x11-server-Xwayland 22.1.9-7.el9_4 RHSA-2026:0031
RHEL 9.2 E4S tigervnc +6 1.12.0-14.el9_2.13 RHSA-2025:22055
RHEL 9.2 E4S xorg-x11-server +6 1.20.11-19.el9_2 RHSA-2025:22364
RHEL 9.2 E4S xorg-x11-server-Xwayland 21.1.3-9.el9_2 RHSA-2026:0036
RHEL 9.0 E4S tigervnc +6 1.11.0-22.el9_0.16 RHSA-2025:22056
RHEL 9.0 E4S xorg-x11-server +6 1.20.11-12.el9_0 RHSA-2025:22365
RHEL 9.0 E4S xorg-x11-server-Xwayland 21.1.3-4.el9_0 RHSA-2026:0034
RHEL 8.8 TUS tigervnc +6 1.12.0-15.el8_8.16 RHSA-2025:22164
RHEL 8.8 TUS xorg-x11-server +6 1.20.11-17.el8_8 RHSA-2025:22426
RHEL 8.8 TUS xorg-x11-server-Xwayland 21.1.3-12.el8_8 RHSA-2026:0033
RHEL 8.8 E4S tigervnc +6 1.12.0-15.el8_8.16 RHSA-2025:22164
RHEL 8.8 E4S xorg-x11-server +6 1.20.11-17.el8_8 RHSA-2025:22426
RHEL 8.8 E4S xorg-x11-server-Xwayland 21.1.3-12.el8_8 RHSA-2026:0033
RHEL 8.6 TUS tigervnc +6 1.12.0-6.el8_6.15 RHSA-2025:22041
RHEL 8.6 TUS xorg-x11-server +6 1.20.11-6.el8_6 RHSA-2025:22427
RHEL 8.6 TUS xorg-x11-server-Xwayland 21.1.3-2.el8_6.5 RHSA-2026:0035
RHEL 8.6 E4S tigervnc +6 1.12.0-6.el8_6.15 RHSA-2025:22041
RHEL 8.6 E4S xorg-x11-server +6 1.20.11-6.el8_6 RHSA-2025:22427
RHEL 8.6 E4S xorg-x11-server-Xwayland 21.1.3-2.el8_6.5 RHSA-2026:0035
RHEL 8.6 AUS tigervnc +6 1.12.0-6.el8_6.15 RHSA-2025:22041
RHEL 8.6 AUS xorg-x11-server +6 1.20.11-6.el8_6 RHSA-2025:22427
RHEL 8.6 AUS xorg-x11-server-Xwayland 21.1.3-2.el8_6.5 RHSA-2026:0035
RHEL 8.4 EUS Long Life tigervnc +6 1.11.0-8.el8_4.14 RHSA-2025:22167
RHEL 8.4 EUS Long Life xorg-x11-server +7 1.20.10-3.el8_4 RHSA-2025:22753
RHEL 8.4 AUS tigervnc +6 1.11.0-8.el8_4.14 RHSA-2025:22167
RHEL 8.4 AUS xorg-x11-server +7 1.20.10-3.el8_4 RHSA-2025:22753
RHEL 8.2 AUS tigervnc +6 1.9.0-15.el8_2.15 RHSA-2025:22077
RHEL 8.2 AUS xorg-x11-server +7 1.20.6-5.el8_2 RHSA-2025:22729
RHEL 7 ELS tigervnc +6 1.8.0-36.el7_9.3 RHSA-2025:22096
RHEL 7 ELS xorg-x11-server +9 1.20.4-33.el7_9 RHSA-2025:22040
RHEL 6 ELS tigervnc +3 1.1.0-25.el6_10.15 RHSA-2025:22667

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 xorg-x11-server-Xwayland +1 24.1.5-5.el10_0 ALSA-2025:21035, ALSA-2025:19435
AlmaLinux 9 tigervnc +6 1.14.1-9.el9_6 ALSA-2025:20958, ALSA-2025:19489
AlmaLinux 9 xorg-x11-server-Xdmx +7 1.20.11-32.el9_7 ALSA-2025:20961
AlmaLinux 9 xorg-x11-server-Xwayland +1 23.2.7-5.el9_7 ALSA-2025:20960
AlmaLinux 8 tigervnc +6 1.15.0-8.el8_10 ALSA-2025:19909
AlmaLinux 8 xorg-x11-server-Xdmx +7 1.20.11-27.el8_10 ALSA-2025:19434
AlmaLinux 8 xorg-x11-server-Xwayland 21.1.3-19.el8_10 ALSA-2025:19432

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 xorg-x11-server-Xwayland 24.1.5-5.el10_0 RLSA-2025:19435
Rocky Linux 9 tigervnc 1.15.0-6.el9_7 RLSA-2025:20958
Rocky Linux 9 xorg-x11-server 1.20.11-32.el9_6 RLSA-2025:20961, RLSA-2025:19433
Rocky Linux 9 xorg-x11-server-Xwayland 23.2.7-5.el9_6 RLSA-2025:20960, RLSA-2025:19623
Rocky Linux 8 tigervnc 1.15.0-8.el8_10.rocky.0.1 RLSA-2025:19909
Rocky Linux 8 xorg-x11-server 1.20.11-27.el8_10 RLSA-2025:19434
Rocky Linux 8 xorg-x11-server-Xwayland 21.1.3-19.el8_10 RLSA-2025:19432
ReleasePackageFixed inAdvisory
SLES 15 SP7 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3865-1, SUSE-SU-2025:3864-1
SLES 15 SP7 xwayland 24.1.5-150700.3.9.1 SUSE-SU-2025:3874-1
SLES 15 SP6 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3872-1, SUSE-SU-2025:3864-1
SLES 15 SP6 xwayland 24.1.1-150600.5.18.1 SUSE-SU-2025:3863-1
SLES 15 SP5 xorg-x11-server 21.1.4-150500.7.43.1 SUSE-SU-2025:3866-1
SLES 15 SP4 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SLES 15 SP3 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3864-1
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 xorg-x11-server 1.19.6-10.94.1 SUSE-SU-2025:3858-1
SLES for SAP 16.0 xwayland 24.1.6-160000.3.1 SUSE-SU-2025:21149-1
SLES for SAP 15 SP5 xorg-x11-server 21.1.4-150500.7.43.1 SUSE-SU-2025:3866-1
SLES for SAP 15 SP4 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SLES for SAP 15 SP3 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3864-1
SLES 16.0 xwayland 24.1.6-160000.3.1 SUSE-SU-2025:21149-1
SLE HPC 15 SP5 xorg-x11-server 21.1.4-150500.7.43.1 SUSE-SU-2025:3866-1
SLE HPC 15 SP4 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SLE HPC 15 SP3 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3864-1
SUSE Manager Server LTS 4.3 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SUSE Manager Proxy LTS 4.3 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SUSE Enterprise Storage 7.1 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3864-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed xorg-x11-server 21.1.15-7.1 openSUSE-SU-2025:15683-1
openSUSE Tumbleweed xwayland 24.1.8-4.1 openSUSE-SU-2025:15684-1
openSUSE Leap 16.0 xorg-x11-server 21.1.15-160000.3.1 openSUSE-SU-2026:20198-1
openSUSE Leap 16.0 xwayland 24.1.6-160000.3.1 openSUSE-SU-2025:20099-1
openSUSE Leap 15.6 xorg-x11-server 21.1.11-150600.5.20.1 SUSE-SU-2025:3872-1
openSUSE Leap 15.6 xwayland 24.1.1-150600.5.18.1 SUSE-SU-2025:3863-1
ReleasePackageFixed inAdvisory
Alpine v3.24 xorg-server 21.1.19-r0 —
Alpine v3.24 xwayland 24.1.9-r0 —
Alpine v3.23 xorg-server 21.1.19-r0 —
Alpine v3.23 xwayland 24.1.9-r0 —
Alpine v3.22 xorg-server 21.1.19-r0 —
Alpine v3.22 xwayland 24.1.9-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 tigervnc +6 1.14.1-3.amzn2023.0.3 ALAS2023-2025-1267
Amazon Linux 2023 xorg-x11-server-Xorg +6 21.1.13-5.amzn2023.0.7 ALAS2023-2025-1269
Amazon Linux 2023 xorg-x11-server-Xwayland +1 24.1.3-1.amzn2023.0.3 ALAS2023-2025-1268
Amazon Linux 2 tigervnc +6 1.8.0-24.amzn2.0.7 ALAS2-2025-3065
Amazon Linux 2 xorg-x11-server-Xdmx +8 1.20.4-22.amzn2.0.10 ALAS2-2025-3066

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 xorg-x11-server-Xwayland 24.1.6-3 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 xorg-x11-server-Xwayland +1 24.1.5-5.el10_0 ELSA-2025-21035, ELSA-2025-19435
Oracle Linux 9 tigervnc +6 1.14.1-9.el9_6 ELSA-2025-20958, ELSA-2025-19489
Oracle Linux 9 xorg-x11-server-Xdmx +7 1.20.11-32.el9_6 ELSA-2025-20961, ELSA-2025-19433
Oracle Linux 9 xorg-x11-server-Xwayland +1 23.2.7-5.el9_6 ELSA-2025-20960, ELSA-2025-19623
Oracle Linux 8 tigervnc +6 1.15.0-8.el8_10 ELSA-2025-19909
Oracle Linux 8 xorg-x11-server-Xdmx +7 1.20.11-27.el8_10 ELSA-2025-19434
Oracle Linux 8 xorg-x11-server-Xwayland 21.1.3-19.el8_10 ELSA-2025-19432
Oracle Linux 7 tigervnc +6 1.8.0-33.0.9.el7_9 ELSA-2025-22096
Oracle Linux 7 xorg-x11-server-Xdmx +8 1.20.4-29.0.5.el7_9 ELSA-2025-22040

Advisories 50

References