Описание
A flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.
Отчет
This vulnerability is rated as having a Moderate severity for Red Hat Enterprise Linux because exploitation requires an established, authenticated connection from a client session to the local display server. Under typical enterprise deployments, Xorg and Xwayland do not listen for unauthenticated network traffic by default, restricting potential attacks to authenticated local users or forwarded sessions. Although a successful exploit may cause memory corruption leading to server crashes or arbitrary code execution within the privileges of the running display server, it cannot be triggered remotely by unauthenticated attackers.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | tigervnc | Out of support scope | ||
| Red Hat Enterprise Linux 6 | xorg-x11-server | Out of support scope | ||
| Red Hat Enterprise Linux 7 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 7 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 8 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 8 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 9 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 10 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:85191 | 19.10.2026 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:86907 | 21.10.2026 |
| Red Hat Enterprise Linux 9 | xorg-x11-server | Fixed | RHSA-2026:84574 | 19.10.2026 |
Показывать по
Дополнительная информация
Статус:
7.8 High
CVSS3
7.8 High
CVSS3