[XKB ChangeKeycodeRange Heap Out-of-Bounds Write]

A flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.

[XKB ChangeKeycodeRange Heap Out-of-Bounds Write]

ELSA-2026-84574: xorg-x11-server security update (IMPORTANT)

ELSA-2026-85193: xorg-x11-server-Xwayland security update (IMPORTANT)

ELSA-2026-85191: xorg-x11-server-Xwayland security update (IMPORTANT)

Security update for xorg-x11-server

Security update for xorg-x11-server

Security update for xorg-x11-server

Security update for xorg-x11-server

Security update for xorg-x11-server

Security update for xwayland