CVE-2025-62229 | BDVDB-2026-300243 Detail
X.OrgXwayland
Description#
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-416 Use After Free
References#
- https://access.redhat.com/errata/RHSA-2025:19432
- https://access.redhat.com/errata/RHSA-2025:19433
- https://access.redhat.com/errata/RHSA-2025:19434
- https://access.redhat.com/errata/RHSA-2025:19435
- https://access.redhat.com/errata/RHSA-2025:19489
- https://access.redhat.com/errata/RHSA-2025:19623
- https://access.redhat.com/errata/RHSA-2025:19909
- https://access.redhat.com/errata/RHSA-2025:20958
- https://access.redhat.com/errata/RHSA-2025:20960
- https://access.redhat.com/errata/RHSA-2025:20961
- https://access.redhat.com/errata/RHSA-2025:21035
- https://access.redhat.com/errata/RHSA-2025:22040
- https://access.redhat.com/errata/RHSA-2025:22041
- https://access.redhat.com/errata/RHSA-2025:22051
- https://access.redhat.com/errata/RHSA-2025:22055
Show all 38
- https://access.redhat.com/errata/RHSA-2025:22056
- https://access.redhat.com/errata/RHSA-2025:22077
- https://access.redhat.com/errata/RHSA-2025:22096
- https://access.redhat.com/errata/RHSA-2025:22164
- https://access.redhat.com/errata/RHSA-2025:22167
- https://access.redhat.com/errata/RHSA-2025:22364
- https://access.redhat.com/errata/RHSA-2025:22365
- https://access.redhat.com/errata/RHSA-2025:22426
- https://access.redhat.com/errata/RHSA-2025:22427
- https://access.redhat.com/errata/RHSA-2025:22667
- https://access.redhat.com/errata/RHSA-2025:22729
- https://access.redhat.com/errata/RHSA-2025:22742
- https://access.redhat.com/errata/RHSA-2025:22753
- https://access.redhat.com/errata/RHSA-2026:0031
- https://access.redhat.com/errata/RHSA-2026:0033
- https://access.redhat.com/errata/RHSA-2026:0034
- https://access.redhat.com/errata/RHSA-2026:0035
- https://access.redhat.com/errata/RHSA-2026:0036
- https://access.redhat.com/security/cve/CVE-2025-62229
- https://bugzilla.redhat.com/show_bug.cgi?id=2402649
- https://lists.x.org/archives/xorg-announce/2025-October/003635.html
- https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html
- http://www.openwall.com/lists/oss-security/2025/10/28/7
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.