AZL-111470: CVE-2026-93536 affecting package xorg-x11-server 1.20.10-6

Q: Who can exploit this issue?

An authenticated X client can trigger the use-after-free condition. Systems that do not permit untrusted or unneeded clients to connect to the X server have a reduced exposure surface.

Q: What could successful exploitation cause?

An attacker may be able to crash the X server, causing a denial of service. The issue could also potentially allow code execution.

Q: Which upstream versions contain the fix?

The issue affects X.Org X Server versions before 21.1.25 and XWayland versions before 24.1.14. The affected package identified here is xorg-x11-server 1.20.10-6.

Published Oct 28, 2026

Updated

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code.

Affected Software

1 affected component

azure-linux/xorg-x11-server<=1.20.10-6

Event History

Oct 28, 2026

Advisory Published

via OSV·05:18 PM

Data Sourced

via OSV·05:18 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93536

Frequently Asked Questions

Who can exploit this issue?

An authenticated X client can trigger the use-after-free condition. Systems that do not permit untrusted or unneeded clients to connect to the X server have a reduced exposure surface.

What could successful exploitation cause?

An attacker may be able to crash the X server, causing a denial of service. The issue could also potentially allow code execution.

Which upstream versions contain the fix?

The issue affects X.Org X Server versions before 21.1.25 and XWayland versions before 24.1.14. The affected package identified here is xorg-x11-server 1.20.10-6.

AZL-111470: CVE-2026-93536 affecting package xorg-x11-server 1.20.10-6

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation cause?

Which upstream versions contain the fix?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation cause?

Which upstream versions contain the fix?