Red Hat Security Advisory

RHSA-2026:36792

xorg-x11-server security update

Released 2026-07-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) xorg-x11-server-1.20.10-5.el8_4, xorg-x11-server-Xdmx-1.20.10-5.el8_4, xorg-x11-server-Xephyr-1.20.10-5.el8_4 +5
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) xorg-x11-server-1.20.10-5.el8_4, xorg-x11-server-Xdmx-1.20.10-5.el8_4, xorg-x11-server-Xephyr-1.20.10-5.el8_4 +5

Fixes 9 records

TI-2026-37008 CVE-2026-50264 · GHSA-c83q-p66f-qr9p

Out-of-bounds write in Red Hat Enterprise Linux 10

LOW 35

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00148 Published 2026-06-05 Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +25 CWE-787

TI-2026-37005 CVE-2026-50261 · GHSA-4r2h-m6wp-gxg9

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()

LOW 35

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00154 Published 2026-06-05 Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416

TI-2026-37004 CVE-2026-50260 · GHSA-7j37-rf7v-jf5c

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()

LOW 35

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00154 Published 2026-06-05 Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416

TI-2026-37003 CVE-2026-50259 · GHSA-7ww4-jpp4-x9fw

Stack-based buffer overflow in Red Hat Enterprise Linux 10

LOW 35

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2026-06-05 Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-121

TI-2026-37002 CVE-2026-50258 · GHSA-74fp-pmv2-rh3f

Stack-based buffer overflow in Red Hat Enterprise Linux 10

LOW 35

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-06-05 Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-121

TI-2026-37001 CVE-2026-50257 · GHSA-5p7p-jgvj-4v95

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()

LOW 35

A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00142 Published 2026-06-05 Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416

TI-2026-37000 CVE-2026-50256 · GHSA-7gx3-r5q9-6j33

Stack-based buffer overflow in Red Hat Enterprise Linux 10

LOW 35

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2026-06-05 Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-121

TI-2026-37007 CVE-2026-50263 · GHSA-4ph5-83mw-vm42

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()

LOW 24

A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00141 Published 2026-06-05 Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416

TI-2026-37006 CVE-2026-50262 · GHSA-jx39-26rr-cwqp

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes

LOW 24

An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00132 Published 2026-06-05 Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-125