UBUNTU-CVE-2026-109091: Medium severity ubuntu/xorg-server vulnerability
Published Nov 13, 2026
·Updated
[X.Org Server EDID DSRANGES Out-Of-Bounds Write]
Affected Software
14 affected components
ubuntu/xorg-server*
ubuntu/xorg-server*
ubuntu/xorg-server-hwe-16.04*
ubuntu/xorg-server*
ubuntu/xorg-server-hwe-18.04*
ubuntu/xorg-server*
ubuntu/xorg-server*
ubuntu/xwayland*
ubuntu/xorg-server*
ubuntu/xwayland*
ubuntu/xorg-server*
ubuntu/xwayland*
ubuntu/xorg-server*
ubuntu/xwayland*
Event History
Nov 13, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Ubuntu package families should be included in triage?
The listed software is ubuntu/xorg-server, ubuntu/xwayland, ubuntu/xorg-server-hwe-16.04, and ubuntu/xorg-server-hwe-18.04.