[CVE-2026-56000] Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21…

Descripción técnica

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

X server, Xwayland — X.org

Debilidades (CWE)

CWE-416

Fuente oficial

Publicado en NIST NVD.