DEBIAN-CVE-2026-93515: Use After Free

Q: Who can exploit this issue?

An attacker needs to act as a malicious X client. The provided vector indicates local access and low privileges are required, with no user interaction required.

Q: What is the likely impact?

A malicious X client can crash the X server, causing an availability impact. The issue could also potentially allow code execution in the X server context.

Q: Which versions are affected?

The issue affects X.org X Server versions before 21.1.25 and X Wayland versions before 24.1.14.

Published Oct 28, 2026

Updated

A use-after-free in presentclearwindownotifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potentially execute code in the X server context.

Affected Software

6 affected componentsFixes available

debian/xorg-server*

debian/xorg-server<2:21.1.25-1

2:21.1.25-1

debian/xwayland*

debian/xwayland<2:24.1.14-1

2:24.1.14-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/xorg-server to a version that resolves this vulnerability.
Fixed in 2:21.1.25-1
Upgrade
Upgrade debian/xwayland to a version that resolves this vulnerability.
Fixed in 2:24.1.14-1

Event History

Oct 28, 2026

CVE Published

via OSV·01:17 PM

Data Sourced

via OSV·01:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this issue?

An attacker needs to act as a malicious X client. The provided vector indicates local access and low privileges are required, with no user interaction required.

What is the likely impact?

A malicious X client can crash the X server, causing an availability impact. The issue could also potentially allow code execution in the X server context.

Which versions are affected?

The issue affects X.org X Server versions before 21.1.25 and X Wayland versions before 24.1.14.

DEBIAN-CVE-2026-93515: Use After Free

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact?

Which versions are affected?