Описание
A flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS).
Отчет
Red Hat has evaluated this vulnerability as Moderate impact because exploitation requires an established, authenticated connection from a local client to the display server. While triggering the integer truncation during keyboard mapping reconfiguration can result in memory corruption or service termination, access is constrained to interactive user sessions. Headless server deployments that do not run graphical display services such as Xorg or Xwayland are not exposed to this risk.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | tigervnc | Out of support scope | ||
| Red Hat Enterprise Linux 6 | xorg-x11-server | Out of support scope | ||
| Red Hat Enterprise Linux 7 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 7 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 8 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 8 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 9 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 10 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:85191 | 19.10.2026 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:86907 | 21.10.2026 |
| Red Hat Enterprise Linux 9 | xorg-x11-server | Fixed | RHSA-2026:84574 | 19.10.2026 |
Показывать по
Дополнительная информация
Статус:
7.8 High
CVSS3
7.8 High
CVSS3