AZL-112309: CVE-2026-93524 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

Q: What level of access does an attacker need to exploit this issue?

An attacker must be an authenticated X client. The available information does not indicate that unauthenticated access is sufficient.

Q: What could exploitation allow?

Exploitation may leak small amounts of information from X server memory. It could also potentially crash the X server.

Q: How can I determine whether my system is affected?

Check the installed xorg-x11-server-Xwayland package version. Azure Linux systems with versions earlier than 24.1.14-1 are affected.

Published Oct 28, 2026

Updated

A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the X server.

Affected Software

1 affected componentFixes available

azure-linux/xorg-x11-server-xwayland<24.1.14-1

24.1.14-1

Event History

Oct 28, 2026

Advisory Published

via OSV·05:18 PM

Data Sourced

via OSV·05:18 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93524

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker must be an authenticated X client. The available information does not indicate that unauthenticated access is sufficient.

What could exploitation allow?

Exploitation may leak small amounts of information from X server memory. It could also potentially crash the X server.

How can I determine whether my system is affected?

Check the installed xorg-x11-server-Xwayland package version. Azure Linux systems with versions earlier than 24.1.14-1 are affected.

AZL-112309: CVE-2026-93524 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could exploitation allow?

How can I determine whether my system is affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could exploitation allow?

How can I determine whether my system is affected?