CVE-2026-93519: X.Org Server XFixes Pointer Barrier Event List Buffer Overflow
A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
X.Org X serverto a version that resolves this vulnerability.Fixed in 21.1.25 - Upgrade
Upgrade
XWaylandto a version that resolves this vulnerability.Fixed in 24.1.14
Event History
Frequently Asked Questions
Which systems are exposed?
Systems running X.Org X server versions before 21.1.25 or XWayland versions before 24.1.14 are affected when they accept connections from authenticated X clients using the XFIXES extension.
What access does an attacker need?
An attacker must be an authenticated X client. Exploitation does not require user interaction and may allow the client to crash the X server or potentially execute code in the X server context.
How can I determine whether I am affected?
Check the installed X.Org X server and XWayland versions. X.Org X server releases before 21.1.25 and XWayland releases before 24.1.14 should be treated as affected.