RLSA-2026:99623: Important: tigervnc security update
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.
Security Fix(es):
xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)
xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)
xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)
xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)
xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)
xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)
xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in inputconstraincursor() (CVE-2026-93519)
xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/tigervnc-server-module-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervncto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-debugsourceto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-serverto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-server-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-server-minimalto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-server-minimal-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-server-moduleto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-iconsto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-licenseto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10 - Upgrade
Upgrade
rocky-linux/tigervnc-selinuxto a version that resolves this vulnerability.Fixed in 0:1.15.0-11.el8_10
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What level of access would an attacker need to exploit this issue?
The vector indicates local access, low attack complexity, and low privileges required. No user interaction is required.
What impact could successful exploitation have?
The advisory's CVSS vector indicates high impact to confidentiality, integrity, and availability, with the impact remaining within the vulnerable security authority.
Which Rocky Linux packages should be reviewed for exposure?
Review installations of tigervnc, tigervnc-server, tigervnc-server-minimal, and the listed debuginfo or debugsource packages. The provided data does not identify affected or fixed package versions.