Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-0408

Xorg-x11-server: selinux unlabeled glx pbuffer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

xorg-server

Default version status: unaffected

  • 21.1.0 to < 21.1.11affected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

  • 0:1.20.4-27.el7_9 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:1.20.11-22.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:21.1.3-15.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.20.11-24.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:22.1.9-5.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

References