CVE-2026-93524

Published: October 8, 2026Last modified: October 12, 2026

Description

A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the X server.

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSxorg-serverFixed (21.1.25-r0)
25 LTSxorg-serverFixed (21.1.25-r0)
Streamxorg-serverFixed (21.1.25-r0)

References

ON THIS PAGE