Описание
A flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that can lead to a denial of service (DoS) or potential arbitrary code execution.
Отчет
This vulnerability is rated as Important severity because an authenticated local client can trigger heap memory corruption, which may allow local privilege escalation if the display server operates with administrative privileges or cause a denial of service by terminating the session. In standard Red Hat Enterprise Linux deployments using Wayland, the root impact is reduced as XWayland runs within an unprivileged user session; however, legacy Xorg server configurations running as root remain susceptible to full privilege escalation. Headless server installations that do not run graphical display environments are not exposed to this flaw.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | tigervnc | Under investigation | ||
| Red Hat Enterprise Linux 6 | xorg-x11-server | Under investigation | ||
| Red Hat Enterprise Linux 7 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 7 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 8 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 8 | xorg-x11-server | Affected | ||
| Red Hat Enterprise Linux 9 | tigervnc | Affected | ||
| Red Hat Enterprise Linux 10 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:85191 | 19.10.2026 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland | Fixed | RHSA-2026:86907 | 21.10.2026 |
| Red Hat Enterprise Linux 9 | xorg-x11-server | Fixed | RHSA-2026:82015 | 13.10.2026 |
Показывать по
Дополнительная информация
Статус:
7.8 High
CVSS3
7.8 High
CVSS3