CVE-2025-26600

CVE-2025-26600 is a use-after-free in X.Org/Xwayland. The issue occurs when a device is removed while still frozen, leaving queued events that, when replayed after the device is freed, trigger use-after-free. Connected advisories confirm Xwayland/xorg involvement and list related fixes across Xwa...

CVE-2025-26600 Xorg: xwayland: use-after-free in playreleasedevents()

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

CVE-2025-26600 Xorg: xwayland: use-after-free in playreleasedevents()

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

CVE-2025-26600

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

CVE-2025-26600 Xorg: xwayland: use-after-free in playreleasedevents()

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

CVE-2025-26600

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

CVE-2025-26600

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free. Mitigation Mitigation for this issue is either not available or the currently...

X.Org和Xwayland 资源管理错误漏洞

X.Org is an open source free software from the X.Org Foundation.Xwayland is an open source communication protocol from Xwayland that specifies how a display server communicates with its clients. A resource management error vulnerability exists in X.Org and Xwayland that stems from a device being...

CVE-2025-26600: Use After Free

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

PT-2025-7898

Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description A use-after-free flaw was found in the software. This issue occurs when a device is removed while still frozen, causing events queued for that device to remain after the device is...

PT-2025-10070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the gadget workqueue not being properly cleaned up after device removal. This can lead to new work being scheduled in the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: Release the next-hop information upon device removal The CI is experiencing some non-periodic hangs during device removal in the pmtu.sh self-test: unregisternetdevice: Waiting for vethA-R1 to become available. Usage count ...

CVE-2025-21677

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

ipv6: release nexthop on device removal

...

PT-2025-8882

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the iopf queue remove device function. This function is responsible for removing a device from the per-iommu...

USN-7185-2: Linux kernel (Azure) vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...

PT-2025-37950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s macb driver related to the order of operations during device removal. Specifically, the phy exit function was being called before unregister netdev,...

PT-2025-34385

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The PowerNV hotplug code did not handle surprise plug events correctly, leading to a complete failure of the hotplug system after device removal and requiring a reboot to detect new...

PT-2025-34386

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to PCI device hotplug handling within the pnv php driver. When the root of a nested PCIe bridge configuration is unplugged, the driver leaks...

PT-2025-52659

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel contains an issue within the USB subsystem related to unmapping URBs USB Request Blocks when a UAS USB Attached SCSI device is removed during data transfer. Specifically...