CVE-2025-26598: Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()
First published: Wed Feb 12 2025(Updated: )
An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/xorg-server | <=2:1.20.11-1+deb11u13<=2:21.1.7-3+deb12u8<=2:21.1.15-3 | 2:1.20.11-1+deb11u15 2:21.1.7-3+deb12u9 2:21.1.16-1 |
| debian/xwayland | <=2:22.1.9-1<=2:24.1.5-1 | 2:24.1.6-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2025-26598
- https://bugzilla.redhat.com/show_bug.cgi?id=2345254
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26598
- https://nvd.nist.gov/vuln/detail/CVE-2025-26598
- https://launchpad.net/bugs/cve/CVE-2025-26598
- https://security-tracker.debian.org/tracker/CVE-2025-26598
- https://ubuntu.com/security/CVE-2025-26598
- https://lists.x.org/archives/xorg-announce/2025-February/003584.html
- https://gitlab.freedesktop.org/xorg/xserver/-/commit/bba9df1a9d57234c76c0b93f88dacb143d01bca2
Frequently Asked Questions
What is the severity of CVE-2025-26598?
CVE-2025-26598 has been classified as a high-severity vulnerability due to its potential for causing out-of-bounds write errors.
How do I fix CVE-2025-26598?
To fix CVE-2025-26598, update the xorg-server and xwayland packages to the latest secure versions provided by your distribution.
Which software is affected by CVE-2025-26598?
CVE-2025-26598 affects the xorg-server and xwayland packages in specific versions as noted by the vulnerability report.
What could happen if CVE-2025-26598 is exploited?
Exploitation of CVE-2025-26598 could lead to potential system crashes or unauthorized access due to memory corruption.
Is there a known exploit for CVE-2025-26598?
As of now, there are no publicly disclosed exploits for CVE-2025-26598, but it remains a significant security concern.
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-26598
- collector/nvd-api
- source/NVD
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/severity
- agent/first-publish-date
- agent/author
- agent/softwarecombine
- agent/trending
- agent/source
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/event
- collector/nvd-cve
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- package-manager/debian