AZL-113818: CVE-2026-109904 affecting package xorg-x11-server 1.20.10-6

Q: Who can exploit this issue?

An attacker needs to be able to act as an authenticated X client. The issue is not described as exploitable by an unauthenticated remote party.

Q: What could successful exploitation cause?

Successful exploitation could crash the X server or leak information from it.

Q: How can I determine whether my X server is within the affected upstream ranges?

Xwayland versions before 24.1.15 and X Server versions before 21.1.26 are affected according to the available information. The provided data does not state which Azure Linux package version contains the fix.

Published Nov 13, 2026

Updated

A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by attackers on authenticated X clients to crash the server or leak out information.

Affected Software

1 affected component

azure-linux/xorg-x11-server<=1.20.10-6

Event History

Nov 13, 2026

Advisory Published

via OSV·11:17 AM

Data Sourced

via OSV·11:17 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-109904

Frequently Asked Questions

Who can exploit this issue?

An attacker needs to be able to act as an authenticated X client. The issue is not described as exploitable by an unauthenticated remote party.

What could successful exploitation cause?

Successful exploitation could crash the X server or leak information from it.

How can I determine whether my X server is within the affected upstream ranges?

Xwayland versions before 24.1.15 and X Server versions before 21.1.26 are affected according to the available information. The provided data does not state which Azure Linux package version contains the fix.

AZL-113818: CVE-2026-109904 affecting package xorg-x11-server 1.20.10-6

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation cause?

How can I determine whether my X server is within the affected upstream ranges?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation cause?

How can I determine whether my X server is within the affected upstream ranges?