AZL-113828: CVE-2026-109904 affecting package wayland 1.22.0-1

Q: Who can exploit this issue?

An attacker must be able to act as an authenticated X client. Systems that do not expose an X server or Xwayland session to untrusted authenticated clients are not exposed through this attack path.

Q: What is the likely impact of successful exploitation?

Successful exploitation can crash the X server, causing a denial of service, or leak information from the server through a buffer overread.

Q: Which upstream versions contain the vulnerability?

The issue affects X.Org xwayland versions before 24.1.15 and X Server versions before 21.1.26.

Published Nov 13, 2026

Updated

A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by attackers on authenticated X clients to crash the server or leak out information.

Affected Software

1 affected component

azure-linux/wayland<=1.22.0-1

Event History

Nov 13, 2026

Advisory Published

via OSV·11:17 AM

Data Sourced

via OSV·11:17 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-109904

Frequently Asked Questions

Who can exploit this issue?

An attacker must be able to act as an authenticated X client. Systems that do not expose an X server or Xwayland session to untrusted authenticated clients are not exposed through this attack path.

What is the likely impact of successful exploitation?

Successful exploitation can crash the X server, causing a denial of service, or leak information from the server through a buffer overread.

Which upstream versions contain the vulnerability?

The issue affects X.Org xwayland versions before 24.1.15 and X Server versions before 21.1.26.

AZL-113828: CVE-2026-109904 affecting package wayland 1.22.0-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?

Which upstream versions contain the vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?

Which upstream versions contain the vulnerability?