Security Bulletin: Vulnerabilities in xorg-x11-server library (CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50264, CVE-2026-59083, CVE-2026-55999) affect Power HMC.

Summary The xorg-x11-server is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2026-55999 DESCRIPTION: Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000014 advisory. A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000009 advisory. A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2026-054038)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054038 advisory. A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper...

EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2026-3775)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits...

EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2026-3728)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits...

Astra Linux – Vulnerability in xorg-server

A flaw was discovered in xorg-x11-server in versions prior to 21.1.2 and prior to 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function. The greatest threat posed by this vulnerability is related to data confidentiality and integrity, as well as system availability...

ROS-20260908-73-0051

The vulnerability in xorg-x11-drv-nvidia is related to insufficient input validation. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260908-73-0061

The vulnerability in xorg-x11-drv-nvidia is related to insufficient input validation. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260908-73-0046

The vulnerability in xorg-x11-drv-nvidia is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-3320)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized...

NewStart CGSL MAIN 7.02 : xorg-x11-server Vulnerability (NS-SA-2026-0102)

The remote NewStart CGSL host, running version MAIN 7.02, has xorg-x11-server packages installed that are affected by a vulnerability: - A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow...

ROS-20260908-73-0064

The vulnerability in xorg-x11-drv-nvidia is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260908-73-0060

The vulnerability in xorg-x11-drv-nvidia is related to improper saving of resolutions. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260908-73-0069

The vulnerability in xorg-x11-drv-nvidia is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

ROS-20260908-73-0068

The vulnerability in xorg-x11-drv-nvidia is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260908-73-0065

The vulnerability in xorg-x11-drv-nvidia is related to insecure initialization of resources. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

ROS-20260908-73-0057

The vulnerability in xorg-x11-drv-nvidia is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20260908-73-0053

The vulnerability in xorg-x11-drv-nvidia is related to incorrect resource blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

NewStart CGSL MAIN 7.02 : xorg-x11-server-Xwayland Vulnerability (NS-SA-2026-0112)

The remote NewStart CGSL host, running version MAIN 7.02, has xorg-x11-server-Xwayland packages installed that are affected by a vulnerability: - A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer...