Red Hat Security Advisory

RHSA-2026:82015

xorg-x11-server security update

Released 2026-10-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-1.20.11-34.el9_8.4, xorg-x11-server-Xdmx-1.20.11-34.el9_8.4, xorg-x11-server-Xephyr-1.20.11-34.el9_8.4 +4
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) xorg-x11-server-devel-1.20.11-34.el9_8.4, xorg-x11-server-source-1.20.11-34.el9_8.4

Fixes 3 records

TI-2026-82016 CVE-2026-93523 · GHSA-2mch-vxw7-ccc2

Heap buffer overflow in X.Org X Server XInput2 request handling

LOW 35

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or poten…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-122

TI-2026-81490 CVE-2026-88812 · GHSA-prmg-8fm6-8p8h

Double free in X.Org X Server XKB SetGeometry allows crashes

LOW 35

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00187 Published 2026-10-27 Partial fix · 21.1.25, 24.1.14 CWE-415

TI-2026-82008 CVE-2026-93521 · GHSA-8q64-4f7g-q2rf

Heap buffer overflow in X.Org Server RandR ChangeProviderProperty

LOW 33

A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-122