CVE-2026-93516: .Org Server XInput Passive Grab Use-After-Free

Q: Who can exploit this issue?

An authenticated X client can exploit it. The issue requires local access and low privileges; no user interaction is required.

Q: Which deployments are affected?

X.Org X Server versions before 21.1.25 and XWayland versions before 24.1.14 are affected. The vulnerability involves adding and removing XInput master devices while passive grabs are present.

Q: What is the impact of successful exploitation?

An attacker may crash the X server, causing a denial of service. The use-after-free may also potentially allow code execution in the X server context.

Q: How can I determine whether a system remains vulnerable?

Check the installed X.Org X Server and XWayland versions. Systems running X.Org X Server earlier than 21.1.25 or XWayland earlier than 24.1.14 should be treated as affected.

Published Oct 28, 2026

Updated

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X Clients to crash the X server or potentially execute code in X server context.

Affected Software

2 affected components

X.Org X Server<21.1.25

X.Org Xwayland<24.1.14

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade X.org X Server to a version that resolves this vulnerability.
Fixed in 21.1.25
Upgrade
Upgrade XWayland to a version that resolves this vulnerability.
Fixed in 24.1.14

Event History

Oct 28, 2026

CVE Published

via MITRE·01:03 PM

Data Sourced

via MITRE·01:03 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated X client can exploit it. The issue requires local access and low privileges; no user interaction is required.

Which deployments are affected?

X.Org X Server versions before 21.1.25 and XWayland versions before 24.1.14 are affected. The vulnerability involves adding and removing XInput master devices while passive grabs are present.

What is the impact of successful exploitation?

An attacker may crash the X server, causing a denial of service. The use-after-free may also potentially allow code execution in the X server context.

How can I determine whether a system remains vulnerable?

Check the installed X.Org X Server and XWayland versions. Systems running X.Org X Server earlier than 21.1.25 or XWayland earlier than 24.1.14 should be treated as affected.

CVE-2026-93516: .Org Server XInput Passive Grab Use-After-Free

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the impact of successful exploitation?

How can I determine whether a system remains vulnerable?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the impact of successful exploitation?

How can I determine whether a system remains vulnerable?