PT-2025-44228 · Unknown+9 · X.Org Server+9
Published
2025-10-28
·
Updated
2026-02-11
·
CVE-2025-62229
CVSS v3.1
7.3
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
X.Org X Server and Xwayland versions 2:21.1.16-1ubuntu1.2 through 2:24.1.6-1ubuntu0.2
Description
A flaw exists in the X.Org X server and Xwayland when handling X11 Present extension notifications. Improper error handling during notification creation can result in dangling pointers, leading to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
Recommendations
Update xnest to version 2:21.1.16-1ubuntu1.2.
Update xorg-server-source to version 2:21.1.16-1ubuntu1.2.
Update xserver-common to version 2:21.1.16-1ubuntu1.2.
Update xserver-xephyr to version 2:21.1.16-1ubuntu1.2.
Update xserver-xorg-core to version 2:21.1.16-1ubuntu1.2.
Update xserver-xorg-dev to version 2:21.1.16-1ubuntu1.2.
Update xserver-xorg-legacy to version 2:21.1.16-1ubuntu1.2.
Update xvfb to version 2:21.1.16-1ubuntu1.2.
Update xwayland to version 2:24.1.6-1ubuntu0.2.
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Debian
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu
X.Org Server