Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2026-56000

xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

X.Org xorg-x11-server

Default version status: unaffected

  • 0 to < 21.1.24affected

X.Org xwayland

Default version status: unaffected

  • 0 to < 24.1.13affected

References