AZL-111449: CVE-2026-93518 affecting package xorg-x11-server 1.20.10-6

Q: Who can exploit this issue?

An attacker needs to be an authenticated X client connected to the affected X server or XWayland instance.

Q: What impact could successful exploitation have?

The issue could crash the X server and may allow potential code execution in the X server process.

Q: Which upstream versions are in scope?

X.org X server versions before 21.1.25 and XWayland versions before 24.1.14 are affected according to the available information.

Published Oct 28, 2026

Updated

An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server.

Affected Software

1 affected component

azure-linux/xorg-x11-server<=1.20.10-6

Event History

Oct 28, 2026

Advisory Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93518

Frequently Asked Questions

Who can exploit this issue?

An attacker needs to be an authenticated X client connected to the affected X server or XWayland instance.

What impact could successful exploitation have?

The issue could crash the X server and may allow potential code execution in the X server process.

Which upstream versions are in scope?

X.org X server versions before 21.1.25 and XWayland versions before 24.1.14 are affected according to the available information.

AZL-111449: CVE-2026-93518 affecting package xorg-x11-server 1.20.10-6

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

Which upstream versions are in scope?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

Which upstream versions are in scope?