Vulnerability-Lookup

RHSA-2026:85191

Vulnerability from csaf_redhat - Published: 2026-10-19 14:18 - Updated: 2026-10-19 17:16

Summary

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Severity

Important

Notes

Topic: An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) * xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519) * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-88812

A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension (XKB) geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a specially crafted request to the display server. This can cause memory corruption, potentially resulting in a Denial of Service (DoS) or arbitrary code execution with elevated privileges.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-1341 - Multiple Releases of Same Resource or Handle

Affected products

Fixed 25 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-93516

A flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition—where the software attempts to access memory after it has been freed—by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the dangling device pointer. This flaw can lead to arbitrary code execution or a Denial of Service (DoS) via an X server crash.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 25 products, the same list as for CVE-2026-88812

Threats

Impact Important

CVE-2026-93517

A flaw was found in xorg-x11-server. The GLX (OpenGL Extension to the X Window System) interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially crafted request, triggering a heap-based buffer overflow. Successful exploitation can result in arbitrary code execution with the privileges of the X server or cause a Denial of Service (DoS) by crashing the application.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 25 products, the same list as for CVE-2026-88812

Threats

Impact Moderate

CVE-2026-93518

A flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS).

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 25 products, the same list as for CVE-2026-88812

Threats

Impact Moderate

CVE-2026-93519

A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow. This vulnerability may lead to arbitrary code execution or cause the server to crash, resulting in a Denial of Service (DoS).

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 25 products, the same list as for CVE-2026-88812

Threats

Impact Moderate

CVE-2026-93520

A flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 25 products, the same list as for CVE-2026-88812

Threats

Impact Moderate

CVE-2026-93521

A flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR (Resize and Rotate extension) provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update requests, causing memory corruption. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the X server.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 25 products, the same list as for CVE-2026-88812

Threats

Impact Important

CVE-2026-93522

A flaw was found in xorg-x11-server. In the Glamor 2D graphics acceleration module, a buffer allocation error occurs during color depth conversion when processing an image whose source dimensions exceed the destination dimensions. A local user can exploit this vulnerability to trigger an out-of-bounds memory write, potentially leading to privilege escalation, arbitrary code execution, or a denial of service (DoS).

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 25 products, the same list as for CVE-2026-88812

Threats

Impact Important

CVE-2026-93523

A flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that can lead to a denial of service (DoS) or potential arbitrary code execution.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 25 products, the same list as for CVE-2026-88812

Threats

Impact Important

References

48 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:85191	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545161	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545164	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545174	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545177	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545178	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545246	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545860	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545887	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545908	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-88812	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545174	external
https://www.cve.org/CVERecord?id=CVE-2026-88812	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88812	external
https://access.redhat.com/security/cve/CVE-2026-93516	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545161	external
https://www.cve.org/CVERecord?id=CVE-2026-93516	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93516	external
https://access.redhat.com/security/cve/CVE-2026-93517	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545246	external
https://www.cve.org/CVERecord?id=CVE-2026-93517	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93517	external
https://access.redhat.com/security/cve/CVE-2026-93518	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545860	external
https://www.cve.org/CVERecord?id=CVE-2026-93518	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93518	external
https://access.redhat.com/security/cve/CVE-2026-93519	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545887	external
https://www.cve.org/CVERecord?id=CVE-2026-93519	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93519	external
https://access.redhat.com/security/cve/CVE-2026-93520	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545908	external
https://www.cve.org/CVERecord?id=CVE-2026-93520	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93520	external
https://access.redhat.com/security/cve/CVE-2026-93521	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545164	external
https://www.cve.org/CVERecord?id=CVE-2026-93521	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93521	external
https://access.redhat.com/security/cve/CVE-2026-93522	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545178	external
https://www.cve.org/CVERecord?id=CVE-2026-93522	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93522	external
https://access.redhat.com/security/cve/CVE-2026-93523	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545177	external
https://www.cve.org/CVERecord?id=CVE-2026-93523	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93523	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n\n* xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n\n* xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n\n* xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n\n* xorg-x11-server: glamor: size tmp_bits buffer for source coordinate  range in upload_boxes (CVE-2026-93522)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:85191",
        "url": "https://access.redhat.com/errata/RHSA-2026:85191"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2545161",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545161"
      },
      {
        "category": "external",
        "summary": "2545164",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545164"
      },
      {
        "category": "external",
        "summary": "2545174",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545174"
      },
      {
        "category": "external",
        "summary": "2545177",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545177"
      },
      {
        "category": "external",
        "summary": "2545178",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545178"
      },
      {
        "category": "external",
        "summary": "2545246",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545246"
      },
      {
        "category": "external",
        "summary": "2545860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545860"
      },
      {
        "category": "external",
        "summary": "2545887",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545887"
      },
      {
        "category": "external",
        "summary": "2545908",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545908"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85191.json"
      }
    ],
    "title": "Red Hat Security Advisory: xorg-x11-server-Xwayland security update",
    "tracking": {
      "current_release_date": "2026-10-19T17:16:27+00:00",
      "generator": {
        "date": "2026-10-19T17:16:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:85191",
      "initial_release_date": "2026-10-19T14:18:26+00:00",
      "revision_history": [
        {
          "date": "2026-10-19T14:18:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-19T14:18:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-19T17:16:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                  "product_id": "CRB-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.9-4.el10_2.4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.9-4.el10_2.4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@24.1.9-4.el10_2.4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@24.1.9-4.el10_2.4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@24.1.9-4.el10_2.4?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.9-4.el10_2.4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@24.1.9-4.el10_2.4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@24.1.9-4.el10_2.4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@24.1.9-4.el10_2.4?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.9-4.el10_2.4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@24.1.9-4.el10_2.4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@24.1.9-4.el10_2.4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@24.1.9-4.el10_2.4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.9-4.el10_2.4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@24.1.9-4.el10_2.4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@24.1.9-4.el10_2.4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@24.1.9-4.el10_2.4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-88812",
      "cwe": {
        "id": "CWE-1341",
        "name": "Multiple Releases of Same Resource or Handle"
      },
      "discovery_date": "2026-10-02T12:58:50.077000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545174"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension (XKB) geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a specially crafted request to the display server. This can cause memory corruption, potentially resulting in a Denial of Service (DoS) or arbitrary code execution with elevated privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because an authenticated local user able to connect to the X server or Xwayland display can trigger memory corruption, potentially leading to arbitrary code execution or privilege escalation with the privileges of the running display server. In typical Red Hat Enterprise Linux workstation and desktop environments, the X server or Xwayland runs as part of the user session, limiting the blast radius, though legacy configurations or privileged Xorg deployments could allow full local privilege escalation. Environments running headless servers without active graphical sessions or X11 forwarding are not exposed to this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-88812"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545174",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545174"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-88812",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-88812"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-88812",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88812"
        }
      ],
      "release_date": "2026-10-07T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85191"
        },
        {
          "category": "workaround",
          "details": "On server systems where a graphical desktop interface is not required, exposure can be mitigated by disabling the graphical display manager or removing optional X11/Xwayland packages.\n\nTo disable the graphical interface and boot into text mode:\n```\nsystemctl set-default multi-user.target\nsystemctl isolate multi-user.target\n```\n\nAlternatively, remove the affected packages if graphical sessions are not utilized:\n```\ndnf remove xorg-x11-server-Xorg xorg-x11-server-Xwayland\n```\n\nCaveats:\nRemoving these packages or switching system targets will disable graphical login, may remove GNOME and related desktop packages via package manager dependencies, and will break graphical desktop functionality. The server will remain fully accessible and usable via local console terminals and remote SSH sessions.\n\nWarning: Executing these commands will immediately terminate all active graphical sessions.",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling"
    },
    {
      "cve": "CVE-2026-93516",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-10-02T12:40:02.580000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545161"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition\u2014where the software attempts to access memory after it has been freed\u2014by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the dangling device pointer. This flaw can lead to arbitrary code execution or a Denial of Service (DoS) via an X server crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this vulnerability as Important because an authenticated local user with access to an active X server session can trigger memory corruption, potentially leading to local privilege escalation or a denial of service. The flaw resides in how the X.Org server processes input device removal alongside passive grabs, leaving unmanaged device references that are dereferenced during subsequent pointer event handling. While default desktop configurations on modern Red Hat Enterprise Linux releases utilize Wayland sessions, environments running standalone Xorg server instances remain exposed.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93516"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545161",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545161"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93516"
        }
      ],
      "release_date": "2026-10-07T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85191"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling"
    },
    {
      "cve": "CVE-2026-93517",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-10-02T15:08:49.539000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545246"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. The GLX (OpenGL Extension to the X Window System) interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially crafted request, triggering a heap-based buffer overflow. Successful exploitation can result in arbitrary code execution with the privileges of the X server or cause a Denial of Service (DoS) by crashing the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Moderate impact by Red Hat Product Security because exploitation is restricted to authenticated local users who have an active session connected to an X11 or Xwayland display server. Default headless and server installations of Red Hat Enterprise Linux do not run a graphical server and are inherently unexposed to this flaw. In workstation and desktop environments, the risk is bounded by the requirement of existing local client access, preventing remote or unauthenticated exploitation without prior compromise.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93517"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545246",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545246"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93517"
        }
      ],
      "release_date": "2026-10-07T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85191"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow"
    },
    {
      "cve": "CVE-2026-93518",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-05T09:42:21.686000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has evaluated this vulnerability as Moderate impact because exploitation requires an established, authenticated connection from a local client to the display server. While triggering the integer truncation during keyboard mapping reconfiguration can result in memory corruption or service termination, access is constrained to interactive user sessions. Headless server deployments that do not run graphical display services such as Xorg or Xwayland are not exposed to this risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93518"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93518"
        }
      ],
      "release_date": "2026-10-07T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85191"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize"
    },
    {
      "cve": "CVE-2026-93519",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-05T11:29:41.373000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545887"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow. This vulnerability may lead to arbitrary code execution or cause the server to crash, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is evaluated as having a Moderate severity for Red Hat Enterprise Linux because exploitation is restricted to an authenticated local user with access to an active X11 display session, preventing remote exploitation. A local client can trigger memory corruption within the display server by defining a large number of cursor barriers and subsequently generating pointer movement. While this flaw can lead to a crash of the display server or potentially execute code within the context of the running X server process, the blast radius is confined to the local graphical user session.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93519"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545887",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545887"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93519",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93519"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93519",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93519"
        }
      ],
      "release_date": "2026-10-07T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85191"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor()"
    },
    {
      "cve": "CVE-2026-93520",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-05T12:53:29+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545908"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having a Moderate severity for Red Hat Enterprise Linux because exploitation requires an established, authenticated connection from a client session to the local display server. Under typical enterprise deployments, Xorg and Xwayland do not listen for unauthenticated network traffic by default, restricting potential attacks to authenticated local users or forwarded sessions. Although a successful exploit may cause memory corruption leading to server crashes or arbitrary code execution within the privileges of the running display server, it cannot be triggered remotely by unauthenticated attackers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93520"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545908",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545908"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93520",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93520"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93520",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93520"
        }
      ],
      "release_date": "2026-10-07T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85191"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling"
    },
    {
      "cve": "CVE-2026-93521",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-02T12:53:42.872000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545164"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR (Resize and Rotate extension) provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update requests, causing memory corruption. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the X server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an authenticated local client can trigger memory corruption within the X server to crash the display server or potentially execute arbitrary code with elevated privileges. In Red Hat Enterprise Linux environments, modern desktop sessions default to Wayland, which restricts direct exposure to Xwayland compatibility instances. However, systems actively utilizing traditional Xorg sessions remain exposed to local privilege escalation by any authorized user with access to the X display.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93521"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545164",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545164"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93521",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93521"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93521",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93521"
        }
      ],
      "release_date": "2026-10-07T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85191"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests"
    },
    {
      "cve": "CVE-2026-93522",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-02T13:03:27.326000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545178"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. In the Glamor 2D graphics acceleration module, a buffer allocation error occurs during color depth conversion when processing an image whose source dimensions exceed the destination dimensions. A local user can exploit this vulnerability to trigger an out-of-bounds memory write, potentially leading to privilege escalation, arbitrary code execution, or a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: glamor: size tmp_bits buffer for source coordinate  range in upload_boxes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93522"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545178",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545178"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93522",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93522"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93522",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93522"
        }
      ],
      "release_date": "2026-10-07T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85191"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: glamor: size tmp_bits buffer for source coordinate  range in upload_boxes"
    },
    {
      "cve": "CVE-2026-93523",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-02T13:01:36.069000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545177"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that can lead to a denial of service (DoS) or potential arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important severity because an authenticated local client can trigger heap memory corruption, which may allow local privilege escalation if the display server operates with administrative privileges or cause a denial of service by terminating the session. In standard Red Hat Enterprise Linux deployments using Wayland, the root impact is reduced as XWayland runs within an unprivileged user session; however, legacy Xorg server configurations running as root remain susceptible to full privilege escalation. Headless server installations that do not run graphical display environments are not exposed to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
          "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93523"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545177",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545177"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93523",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93523"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93523",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93523"
        }
      ],
      "release_date": "2026-10-07T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85191"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.src",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "AppStream-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.9-4.el10_2.4.x86_64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.aarch64",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.ppc64le",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.s390x",
            "CRB-10.2.Z:xorg-x11-server-Xwayland-devel-0:24.1.9-4.el10_2.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:85191

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour