AZL-111497: CVE-2026-93523 affecting package wayland 1.22.0-1

Q: Who can exploit this issue?

An authenticated X client can trigger the vulnerable XIPassiveUngrabDevice request. Systems running affected X.Org X Server or XWayland versions are exposed to clients that can authenticate to those services.

Q: What could successful exploitation do?

The out-of-range modifier value causes a heap buffer overflow. An attacker may crash the X server or potentially execute code in the X server context.

Q: How can I determine whether a system is affected?

Check the versions of X.Org X Server and XWayland in use. The issue affects X.Org X Server versions before 21.1.15 and XWayland versions before 24.1.14.

Published Oct 28, 2026

Updated

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

Affected Software

1 affected component

azure-linux/wayland<=1.22.0-1

Event History

Oct 28, 2026

Advisory Published

via OSV·05:18 PM

Data Sourced

via OSV·05:18 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93523

Frequently Asked Questions

Who can exploit this issue?

An authenticated X client can trigger the vulnerable XIPassiveUngrabDevice request. Systems running affected X.Org X Server or XWayland versions are exposed to clients that can authenticate to those services.

What could successful exploitation do?

The out-of-range modifier value causes a heap buffer overflow. An attacker may crash the X server or potentially execute code in the X server context.

How can I determine whether a system is affected?

Check the versions of X.Org X Server and XWayland in use. The issue affects X.Org X Server versions before 21.1.15 and XWayland versions before 24.1.14.

AZL-111497: CVE-2026-93523 affecting package wayland 1.22.0-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation do?

How can I determine whether a system is affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation do?

How can I determine whether a system is affected?