AZL-111185: CVE-2026-88812 affecting package wayland 1.22.0-1

Q: Who can exploit this issue?

An attacker needs to be an attached client of the affected X server or X Wayland instance. The provided information does not indicate that unauthenticated remote attackers can trigger it directly.

Q: What is the potential impact?

A successful exploit can cause the X server to crash. It may also potentially allow code execution in the X server context.

Q: Which upstream versions are affected?

The issue affects X.Org X Server versions before 21.1.25 and X Wayland versions before 24.1.14. The provided data identifies the affected Azure Linux package as wayland 1.22.0-1.

Published Oct 27, 2026

Updated

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

Affected Software

1 affected component

azure-linux/wayland<=1.22.0-1

Event History

Oct 27, 2026

Advisory Published

via OSV·06:17 PM

Data Sourced

via OSV·06:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-88812

Frequently Asked Questions

Who can exploit this issue?

An attacker needs to be an attached client of the affected X server or X Wayland instance. The provided information does not indicate that unauthenticated remote attackers can trigger it directly.

What is the potential impact?

A successful exploit can cause the X server to crash. It may also potentially allow code execution in the X server context.

Which upstream versions are affected?

The issue affects X.Org X Server versions before 21.1.25 and X Wayland versions before 24.1.14. The provided data identifies the affected Azure Linux package as wayland 1.22.0-1.

AZL-111185: CVE-2026-88812 affecting package wayland 1.22.0-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

Which upstream versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

Which upstream versions are affected?