CVE-2025-26597

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

CVE-2025-26595

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size...

GHSA-RCJ8-JX65-7C4R vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-2X93-8973-5MGQ vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-MQQF-4P7R-RF89 vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-VX3H-CJ8W-2H2C vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-49WX-9H9F-8C9G vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-PCJV-393Q-RQF2 vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-W668-XCXF-V3GG vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-Q6W6-RJJJ-5P52 vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-3FPG-J8CW-VCJQ vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-CM2M-F7GC-HV64 vulnerabilities

Vulnerabilities for packages: xorg-server...

Slackware Linux 15.0 / current xorg-server Multiple Vulnerabilities (SSA:2025-056-01)

The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.16 / 21.1.4 / 24.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-056-01 advisory. New xorg-server packages are available for Slackware 15.0 and -current to fix security...

Xorg-x11-server: selinux unlabeled glx pbuffer

...

Astra Linux – Vulnerability in xwayland, xorg-server

A use-after-free flaw was discovered in X.Org and Xwayland. When a device is removed while it is still frozen, the events queued for that device remain active even after the device is freed. Playing back those events will lead to a use-after-free...

Astra Linux – Vulnerability in xwayland, xorg-server

A buffer overflow vulnerability was discovered in X.Org and Xwayland. If the XkbChangeTypesOfKey function is called with a value of 0 for the “groups” parameter, it will resize the key symbol table to 0, but leave the key actions unchanged. If the same function is called later with a non-zero val...

Astra Linux – Vulnerability in xwayland, xorg-server

A heap overflow flaw was discovered in X.Org and Xwayland. The calculation of the length in XkbSizeKeySyms differs from what is stored in XkbWriteKeySyms, which may lead to a heap-based buffer overflow...

Astra Linux – Vulnerability in xorg-server, xwayland

A flaw was discovered in the X.org server. Due to an improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition through a specially crafted payload. This could lead to denial of service or local privilege escalation in distributions...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw related to accessing an uninitialized pointer was discovered in X.Org and Xwayland. The compCheckRedirect function may fail if it cannot allocate the backing pixmap. In such cases, compRedirectWindow will return a BadAlloc error without validating the window tree just before processing; as...

Astra Linux – Vulnerability in xwayland, xorg-server

A buffer overflow vulnerability was discovered in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and will copy the data regardless of the siz...