← CVE Intelligence

CVE-2025-62230

Xorg: xwayland: use-after-free in xkb client resource removal PUBLISHED

Description (CNA)

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.

Affected (CNA)

Vendor / productVersions
X.Org / Xwaylandaffected 0 before 24.1.9
Red Hat / Red Hat Enterprise Linux 10unaffected 0:24.1.5-5.el10_0 before *
Red Hat / Red Hat Enterprise Linux 10unaffected 0:24.1.5-5.el10_1 before *
Red Hat / Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSIONunaffected 0:1.1.0-25.el6_10.15 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:1.20.4-33.el7_9 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:1.8.0-36.el7_9.3 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:21.1.3-19.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:1.20.11-27.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:1.15.0-8.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:1.9.0-15.el8_2.15 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:1.20.6-5.el8_2 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:1.11.0-8.el8_4.14 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:1.20.10-3.el8_4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:1.11.0-8.el8_4.14 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:1.20.10-3.el8_4 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:1.12.0-6.el8_6.15 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:1.20.11-6.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:21.1.3-2.el8_6.5 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:1.12.0-6.el8_6.15 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:1.20.11-6.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:21.1.3-2.el8_6.5 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:1.12.0-6.el8_6.15 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:1.20.11-6.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:21.1.3-2.el8_6.5 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:1.12.0-15.el8_8.16 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:1.20.11-17.el8_8 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:21.1.3-12.el8_8 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:1.12.0-15.el8_8.16 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:1.20.11-17.el8_8 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:21.1.3-12.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.20.11-32.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.14.1-9.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:23.2.7-5.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.15.0-6.el9_7 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:23.2.7-5.el9_7 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.20.11-32.el9_7 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:1.11.0-22.el9_0.16 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:1.20.11-12.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:21.1.3-4.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:1.12.0-14.el9_2.13 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:1.20.11-19.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:21.1.3-9.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:1.13.1-8.el9_4.8 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:1.20.11-27.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:22.1.9-7.el9_4 before *
Red Hat / Red Hat Enterprise Linux 6unknown

CWE

CWE-416

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.