AZL-111446: CVE-2026-93517 affecting package xorg-x11-server 1.20.10-6

Q: Who can exploit this issue?

An authenticated X client can trigger the flaw. Systems running an affected X.org X server or XWayland instance are exposed to clients that can connect to that server.

Q: What impact could successful exploitation have?

The issue can cause the X server to crash or may allow code execution in the X server context.

Q: Which upstream versions are affected?

The issue affects X.org X server versions before 21.1.25 and XWayland versions before 24.1.14.

Published Oct 28, 2026

Updated

A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context.

Affected Software

1 affected component

azure-linux/xorg-x11-server<=1.20.10-6

Event History

Oct 28, 2026

Advisory Published

via OSV·02:17 PM

Data Sourced

via OSV·02:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93517

Frequently Asked Questions

Who can exploit this issue?

An authenticated X client can trigger the flaw. Systems running an affected X.org X server or XWayland instance are exposed to clients that can connect to that server.

What impact could successful exploitation have?

The issue can cause the X server to crash or may allow code execution in the X server context.

Which upstream versions are affected?

The issue affects X.org X server versions before 21.1.25 and XWayland versions before 24.1.14.

AZL-111446: CVE-2026-93517 affecting package xorg-x11-server 1.20.10-6

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

Which upstream versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

Which upstream versions are affected?