AZL-111488: CVE-2026-93519 affecting package wayland 1.22.0-1

Q: What access does an attacker need to exploit this issue?

The attacker must be an authenticated X client. The provided information does not indicate that unauthenticated access is sufficient.

Q: What is the potential security impact if exploitation succeeds?

An attacker may be able to crash the X server or potentially execute code in the X server's context.

Published Oct 28, 2026

Updated

A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

Affected Software

1 affected component

azure-linux/wayland<=1.22.0-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade X.Org X server to a version that resolves this vulnerability.
Fixed in 21.1.25
Upgrade
Upgrade XWayland to a version that resolves this vulnerability.
Fixed in 24.1.14

Event History

Oct 28, 2026

Advisory Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93519

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker must be an authenticated X client. The provided information does not indicate that unauthenticated access is sufficient.

What is the potential security impact if exploitation succeeds?

An attacker may be able to crash the X server or potentially execute code in the X server's context.

AZL-111488: CVE-2026-93519 affecting package wayland 1.22.0-1

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential security impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential security impact if exploitation succeeds?