CVE-2026-88812: X.Org Server XKB SetGeometry TextDoodad Double Free
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems running X.Org X Server versions before 21.1.25 or Xwayland versions before 24.1.14 are affected. Exploitation requires an attached client that can interact with the X server.
What does an attacker need to exploit the vulnerability?
An attacker needs local access and low-level privileges sufficient to act as an attached X client. No user interaction is required.
What is the potential impact?
A malicious attached client may trigger a double free, causing the X server to crash or potentially executing code in the X server context.
How can I determine whether I need to remediate?
Check the installed version of X.Org X Server and Xwayland. Remediate if X.Org X Server is earlier than 21.1.25 or Xwayland is earlier than 24.1.14.