Skip to content
OpenAdvisories
High · 7.3 CVE-2025-62231 EUVD-2025-36898GHSA-h4r4-6hvf-34r8

Xorg: xmayland: value overflow in xkbsetcompatmap()

Published Oct 30, 2025 · Updated Nov 5, 2026 · Assigned by redhat

Description

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Affected products

VendorProductAffectedFixed
X.Org Xwayland < 24.1.9 24.1.9
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION — —
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support — —
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support — —
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On — —
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support — —
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service — —
Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service — —
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support — —
Red Hat Red Hat Enterprise Linux 6 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 xorg-server 2:21.1.20-1 —
Debian 14 xwayland 2:24.1.9-1 —
Debian 13 xorg-server 2:21.1.16-1.3+deb13u1 DSA-6044-1
Debian 13 xwayland No fix yet —
Debian 12 xorg-server 2:21.1.7-3+deb12u11 DSA-6044-1
Debian 12 xwayland No fix yet —
Debian 11 xorg-server 2:1.20.11-1+deb11u17 DLA-4353-1
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS xorg-server 2:21.1.21-1ubuntu1 —
Ubuntu 26.04 LTS xwayland 2:24.1.9-1 —
Ubuntu 25.10 xorg-server 2:21.1.18-1ubuntu1.1 USN-7846-1
Ubuntu 25.10 xwayland 2:24.1.6-1ubuntu1.1 USN-7846-1
Ubuntu 24.04 LTS xorg-server 2:21.1.12-1ubuntu1.5 USN-7846-1
Ubuntu 24.04 LTS xwayland 2:23.2.6-1ubuntu0.7 USN-7846-1
Ubuntu 22.04 LTS xorg-server 2:21.1.4-2ubuntu1.7~22.04.16 USN-7846-1
Ubuntu 22.04 LTS xwayland 2:22.1.1-1ubuntu0.20 USN-7846-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS xorg-server No fix yet —
Ubuntu Pro 18.04 LTS xorg-server +1 No fix yet —
Ubuntu Pro 16.04 LTS xorg-server +1 No fix yet —
Ubuntu Pro 14.04 LTS xorg-server No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 xorg-x11-server-Xwayland +1 24.1.5-5.el10_0 RHSA-2025:21035, RHSA-2025:19435
RHEL 9 tigervnc +6 1.14.1-9.el9_6 RHSA-2025:20958, RHSA-2025:19489
RHEL 9 xorg-x11-server +8 1.20.11-32.el9_6 RHSA-2025:20961, RHSA-2025:19433
RHEL 9 xorg-x11-server-Xwayland +1 23.2.7-5.el9_6 RHSA-2025:20960, RHSA-2025:19623
RHEL 8 tigervnc +6 1.15.0-8.el8_10 RHSA-2025:19909
RHEL 8 xorg-x11-server +8 1.20.11-27.el8_10 RHSA-2025:19434
RHEL 8 xorg-x11-server-Xwayland 21.1.3-19.el8_10 RHSA-2025:19432
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS tigervnc +6 1.13.1-8.el9_4.8 RHSA-2025:22051
RHEL 9.4 EUS xorg-x11-server +8 1.20.11-27.el9_4 RHSA-2025:22742
RHEL 9.4 EUS xorg-x11-server-Xwayland 22.1.9-7.el9_4 RHSA-2026:0031
RHEL 9.2 E4S tigervnc +6 1.12.0-14.el9_2.13 RHSA-2025:22055
RHEL 9.2 E4S xorg-x11-server +6 1.20.11-19.el9_2 RHSA-2025:22364
RHEL 9.2 E4S xorg-x11-server-Xwayland 21.1.3-9.el9_2 RHSA-2026:0036
RHEL 9.0 E4S tigervnc +6 1.11.0-22.el9_0.16 RHSA-2025:22056
RHEL 9.0 E4S xorg-x11-server +6 1.20.11-12.el9_0 RHSA-2025:22365
RHEL 9.0 E4S xorg-x11-server-Xwayland 21.1.3-4.el9_0 RHSA-2026:0034
RHEL 8.8 TUS tigervnc +6 1.12.0-15.el8_8.16 RHSA-2025:22164
RHEL 8.8 TUS xorg-x11-server +6 1.20.11-17.el8_8 RHSA-2025:22426
RHEL 8.8 TUS xorg-x11-server-Xwayland 21.1.3-12.el8_8 RHSA-2026:0033
RHEL 8.8 E4S tigervnc +6 1.12.0-15.el8_8.16 RHSA-2025:22164
RHEL 8.8 E4S xorg-x11-server +6 1.20.11-17.el8_8 RHSA-2025:22426
RHEL 8.8 E4S xorg-x11-server-Xwayland 21.1.3-12.el8_8 RHSA-2026:0033
RHEL 8.6 TUS tigervnc +6 1.12.0-6.el8_6.15 RHSA-2025:22041
RHEL 8.6 TUS xorg-x11-server +6 1.20.11-6.el8_6 RHSA-2025:22427
RHEL 8.6 TUS xorg-x11-server-Xwayland 21.1.3-2.el8_6.5 RHSA-2026:0035
RHEL 8.6 E4S tigervnc +6 1.12.0-6.el8_6.15 RHSA-2025:22041
RHEL 8.6 E4S xorg-x11-server +6 1.20.11-6.el8_6 RHSA-2025:22427
RHEL 8.6 E4S xorg-x11-server-Xwayland 21.1.3-2.el8_6.5 RHSA-2026:0035
RHEL 8.6 AUS tigervnc +6 1.12.0-6.el8_6.15 RHSA-2025:22041
RHEL 8.6 AUS xorg-x11-server +6 1.20.11-6.el8_6 RHSA-2025:22427
RHEL 8.6 AUS xorg-x11-server-Xwayland 21.1.3-2.el8_6.5 RHSA-2026:0035
RHEL 8.4 EUS Long Life tigervnc +6 1.11.0-8.el8_4.14 RHSA-2025:22167
RHEL 8.4 EUS Long Life xorg-x11-server +7 1.20.10-3.el8_4 RHSA-2025:22753
RHEL 8.4 AUS tigervnc +6 1.11.0-8.el8_4.14 RHSA-2025:22167
RHEL 8.4 AUS xorg-x11-server +7 1.20.10-3.el8_4 RHSA-2025:22753
RHEL 8.2 AUS tigervnc +6 1.9.0-15.el8_2.15 RHSA-2025:22077
RHEL 8.2 AUS xorg-x11-server +7 1.20.6-5.el8_2 RHSA-2025:22729
RHEL 7 ELS tigervnc +6 1.8.0-36.el7_9.3 RHSA-2025:22096
RHEL 7 ELS xorg-x11-server +9 1.20.4-33.el7_9 RHSA-2025:22040
RHEL 6 ELS tigervnc +3 1.1.0-25.el6_10.15 RHSA-2025:22667

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 xorg-x11-server-Xwayland +1 24.1.5-5.el10_0 ALSA-2025:21035, ALSA-2025:19435
AlmaLinux 9 tigervnc +6 1.14.1-9.el9_6 ALSA-2025:20958, ALSA-2025:19489
AlmaLinux 9 xorg-x11-server-Xdmx +7 1.20.11-32.el9_7 ALSA-2025:20961
AlmaLinux 9 xorg-x11-server-Xwayland +1 23.2.7-5.el9_7 ALSA-2025:20960
AlmaLinux 8 tigervnc +6 1.15.0-8.el8_10 ALSA-2025:19909
AlmaLinux 8 xorg-x11-server-Xdmx +7 1.20.11-27.el8_10 ALSA-2025:19434
AlmaLinux 8 xorg-x11-server-Xwayland 21.1.3-19.el8_10 ALSA-2025:19432

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 xorg-x11-server-Xwayland 24.1.5-5.el10_0 RLSA-2025:19435
Rocky Linux 9 tigervnc 1.15.0-6.el9_7 RLSA-2025:20958
Rocky Linux 9 xorg-x11-server 1.20.11-32.el9_6 RLSA-2025:20961, RLSA-2025:19433
Rocky Linux 9 xorg-x11-server-Xwayland 23.2.7-5.el9_6 RLSA-2025:20960, RLSA-2025:19623
Rocky Linux 8 tigervnc 1.15.0-8.el8_10.rocky.0.1 RLSA-2025:19909
Rocky Linux 8 xorg-x11-server 1.20.11-27.el8_10 RLSA-2025:19434
Rocky Linux 8 xorg-x11-server-Xwayland 21.1.3-19.el8_10 RLSA-2025:19432
ReleasePackageFixed inAdvisory
SLES 15 SP7 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3865-1, SUSE-SU-2025:3864-1
SLES 15 SP7 xwayland 24.1.5-150700.3.9.1 SUSE-SU-2025:3874-1
SLES 15 SP6 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3872-1, SUSE-SU-2025:3864-1
SLES 15 SP6 xwayland 24.1.1-150600.5.18.1 SUSE-SU-2025:3863-1
SLES 15 SP5 xorg-x11-server 21.1.4-150500.7.43.1 SUSE-SU-2025:3866-1
SLES 15 SP4 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SLES 15 SP3 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3864-1
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 xorg-x11-server 1.19.6-10.94.1 SUSE-SU-2025:3858-1
SLES for SAP 16.0 xwayland 24.1.6-160000.3.1 SUSE-SU-2025:21149-1
SLES for SAP 15 SP5 xorg-x11-server 21.1.4-150500.7.43.1 SUSE-SU-2025:3866-1
SLES for SAP 15 SP4 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SLES for SAP 15 SP3 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3864-1
SLES 16.0 xwayland 24.1.6-160000.3.1 SUSE-SU-2025:21149-1
SLE HPC 15 SP5 xorg-x11-server 21.1.4-150500.7.43.1 SUSE-SU-2025:3866-1
SLE HPC 15 SP4 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SLE HPC 15 SP3 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3864-1
SUSE Manager Server LTS 4.3 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SUSE Manager Proxy LTS 4.3 xorg-x11-server 1.20.3-150400.38.63.1 SUSE-SU-2025:3909-1
SUSE Enterprise Storage 7.1 xorg-x11-server 1.20.3-150200.22.5.118.1 SUSE-SU-2025:3864-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed xorg-x11-server 21.1.15-7.1 openSUSE-SU-2025:15683-1
openSUSE Tumbleweed xwayland 24.1.8-4.1 openSUSE-SU-2025:15684-1
openSUSE Leap 16.0 xorg-x11-server 21.1.15-160000.3.1 openSUSE-SU-2026:20198-1
openSUSE Leap 16.0 xwayland 24.1.6-160000.3.1 openSUSE-SU-2025:20099-1
openSUSE Leap 15.6 xorg-x11-server 21.1.11-150600.5.20.1 SUSE-SU-2025:3872-1
openSUSE Leap 15.6 xwayland 24.1.1-150600.5.18.1 SUSE-SU-2025:3863-1
ReleasePackageFixed inAdvisory
Alpine v3.24 xorg-server 21.1.19-r0 —
Alpine v3.24 xwayland 24.1.9-r0 —
Alpine v3.23 xorg-server 21.1.19-r0 —
Alpine v3.23 xwayland 24.1.9-r0 —
Alpine v3.22 xorg-server 21.1.19-r0 —
Alpine v3.22 xwayland 24.1.9-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 tigervnc +6 1.14.1-3.amzn2023.0.3 ALAS2023-2025-1267
Amazon Linux 2023 xorg-x11-server-Xorg +6 21.1.13-5.amzn2023.0.7 ALAS2023-2025-1269
Amazon Linux 2023 xorg-x11-server-Xwayland +1 24.1.3-1.amzn2023.0.3 ALAS2023-2025-1268
Amazon Linux 2 tigervnc +6 1.8.0-24.amzn2.0.7 ALAS2-2025-3065
Amazon Linux 2 xorg-x11-server-Xdmx +8 1.20.4-22.amzn2.0.10 ALAS2-2025-3066

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 xorg-x11-server-Xwayland 24.1.6-3 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 xorg-x11-server-Xwayland +1 24.1.5-5.el10_0 ELSA-2025-21035, ELSA-2025-19435
Oracle Linux 9 tigervnc +6 1.14.1-9.el9_6 ELSA-2025-20958, ELSA-2025-19489
Oracle Linux 9 xorg-x11-server-Xdmx +7 1.20.11-32.el9_6 ELSA-2025-20961, ELSA-2025-19433
Oracle Linux 9 xorg-x11-server-Xwayland +1 23.2.7-5.el9_6 ELSA-2025-20960, ELSA-2025-19623
Oracle Linux 8 tigervnc +6 1.15.0-8.el8_10 ELSA-2025-19909
Oracle Linux 8 xorg-x11-server-Xdmx +7 1.20.11-27.el8_10 ELSA-2025-19434
Oracle Linux 8 xorg-x11-server-Xwayland 21.1.3-19.el8_10 ELSA-2025-19432
Oracle Linux 7 tigervnc +6 1.8.0-33.0.9.el7_9 ELSA-2025-22096
Oracle Linux 7 xorg-x11-server-Xdmx +8 1.20.4-29.0.5.el7_9 ELSA-2025-22040

Advisories 50

References