CVE-2025-62229: Xorg: xmayland: use-after-free in xpresentnotify structure creation
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
Other sources
Use-after-free vulnerability in the X11 Present extension implementation of the X.Org X server and Xwayland. The flaw occurs when processing notifications after presenting a pixmap; if an error happens, a dangling pointer remains in the error path. This leads to a use-after-free when destroying notification structures later. A remote attacker can exploit this via crafted X11 requests to trigger memory corruption or denial of service. The issue has existed since Xorg 1.15.
— Red Hat
Xorg: xmayland: use-after-free in xpresentnotify structure creation
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62229?
The severity of CVE-2025-62229 is high due to its potential to cause memory corruption or application crashes.
How do I fix CVE-2025-62229?
To fix CVE-2025-62229, update to the latest version of X.Org X server or Xwayland that addresses this vulnerability.
What systems are affected by CVE-2025-62229?
CVE-2025-62229 affects versions of the X.Org X server and Xwayland starting from version 1.15.
What type of vulnerability is CVE-2025-62229?
CVE-2025-62229 is a use-after-free vulnerability arising from improper error handling in X11 Present extension notifications.
Can CVE-2025-62229 be exploited remotely?
Yes, CVE-2025-62229 has the potential for remote exploitation since it involves the X server, which can interact with various network clients.