AZL-111461: CVE-2026-93522 affecting package xorg-x11-server 1.20.10-6

Q: Who can exploit this issue?

An attacker needs to be an authenticated X client. The issue affects the X server or XWayland process rather than requiring unauthenticated network access.

Q: What could exploitation achieve?

Successful exploitation could crash the X server. It may also allow code execution in the X server context.

Q: Which upstream versions are affected?

The issue affects X.Org X Server versions before 21.1.15 and XWayland versions before 24.1.14.

Published Oct 28, 2026

Updated

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Affected Software

1 affected component

azure-linux/xorg-x11-server<=1.20.10-6

Event History

Oct 28, 2026

Advisory Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93522

Frequently Asked Questions

Who can exploit this issue?

An attacker needs to be an authenticated X client. The issue affects the X server or XWayland process rather than requiring unauthenticated network access.

What could exploitation achieve?

Successful exploitation could crash the X server. It may also allow code execution in the X server context.

Which upstream versions are affected?

The issue affects X.Org X Server versions before 21.1.15 and XWayland versions before 24.1.14.

AZL-111461: CVE-2026-93522 affecting package xorg-x11-server 1.20.10-6

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What could exploitation achieve?

Which upstream versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could exploitation achieve?

Which upstream versions are affected?