CVE-2026-96423

Меры по смягчению последствий

Disable the X11 protocol dissector if analyzing network traffic that does not require X11 packet decoding. For command-line analysis using tshark, disable the protocol at runtime:

For persistent user configuration, add the protocol identifier to the disabled protocols file:

In the Wireshark graphical interface, the dissector can be disabled by navigating to Analyze > Enabled Protocols, searching for "X11", unchecking the protocol entry, and clicking OK. Caveats: Disabling this dissector prevents Wireshark from decoding and analyzing X11 protocol traffic. Running Wireshark sessions must be restarted for configuration file changes to take effect. Additionally, avoid opening capture files obtained from untrusted sources and avoid running packet capture utilities with elevated root privileges.