Description
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
High
Affected products
- X.Org / xwayland1.15.0 – 24.1.9
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19432
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19433
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19434
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19435
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19489
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19623
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19909
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:20958
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:20960
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:20961
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:21035
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22040
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22041
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22051
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22055
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22056
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22077
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22096
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22164
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22167
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22364
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22365
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22426
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22427
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22667
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22729
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22742
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22753
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0031
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0033
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0034
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0035
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0036
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2025-62229
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2402649
- MAILING_LISThttps://lists.x.org/archives/xorg-announce/2025-October/003635.html
Updated 31m ago · 8 sources