Описание
A flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR (Resize and Rotate extension) provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update requests, causing memory corruption. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the X server.
Отчет
This vulnerability is rated as an Important severity flaw because an authenticated local client can trigger memory corruption within the X server to crash the display server or potentially execute arbitrary code with elevated privileges. In Red Hat Enterprise Linux environments, modern desktop sessions default to Wayland, which restricts direct exposure to Xwayland compatibility instances. However, systems actively utilizing traditional Xorg sessions remain exposed to local privilege escalation by any authorized user with access to the X display.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | tigervnc | Under investigation | ||
| Red Hat Enterprise Linux 6 | xorg-x11-server | Under investigation | ||
| Red Hat Enterprise Linux 7 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 7 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 8 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 8 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 9 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 10 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:85191 | 19.10.2026 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:86907 | 21.10.2026 |
| Red Hat Enterprise Linux 9 | xorg-x11-server | Fixed | RHSA-2026:82015 | 13.10.2026 |
Показывать по
Дополнительная информация
Статус:
7.8 High
CVSS3
7.8 High
CVSS3