AZL-112282: CVE-2026-88812 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

Q: Who can exploit this issue?

An attacker must be an attached client of the affected X.Org X Server or Xwayland instance. The issue may allow that client to crash the server or potentially execute code in the X server context.

Q: Which versions need remediation?

X.Org X Server versions before 21.1.25 and Xwayland versions before 24.1.14 are affected. For the listed Azure Linux package, versions earlier than 24.1.14-1 are affected.

Published Oct 27, 2026

Updated

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

Affected Software

1 affected componentFixes available

azure-linux/xorg-x11-server-xwayland<24.1.14-1

24.1.14-1

Event History

Oct 27, 2026

Advisory Published

via OSV·06:17 PM

Data Sourced

via OSV·06:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-88812

Frequently Asked Questions

Who can exploit this issue?

An attacker must be an attached client of the affected X.Org X Server or Xwayland instance. The issue may allow that client to crash the server or potentially execute code in the X server context.

Which versions need remediation?

X.Org X Server versions before 21.1.25 and Xwayland versions before 24.1.14 are affected. For the listed Azure Linux package, versions earlier than 24.1.14-1 are affected.

AZL-112282: CVE-2026-88812 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

Which versions need remediation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which versions need remediation?