X Wayland (< 24.1.14) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/x-wayland--24.1.14/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 02:16:18 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgX.Org X Server and X Wayland: Double free vulnerability in XKB SetGeometry (CVE-2026-88812)https://feed.craftedsignal.io/briefs/2026-10-xorg-xkb-double-free/Wed, 28 Oct 2026 02:16:18 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-xorg-xkb-double-free/A double-free vulnerability in the XKB SetGeometry implementation in X.Org X Server and X Wayland allows local clients to cause a denial of service or potential arbitrary code execution.CVE-2026-88812 is a memory corruption vulnerability involving a double-free condition in the XKB (X Keyboard Extension) SetGeometry implementation. This flaw affects versions of X.Org X Server prior to 21.1.25 and X Wayland prior to 24.1.14. An attacker with the ability to connect as a client to the X server can exploit this vulnerability to trigger a crash, resulting in a denial of service, or potentially gain arbitrary code execution within the context of the X server process.

Impact

Successful exploitation may lead to a crash of the X server process (Denial of Service) or arbitrary code execution under the privileges of the X server instance.

Recommendation

  • Upgrade X.Org X Server to version 21.1.25 or later.
  • Upgrade X Wayland to version 24.1.14 or later.
  • Review system audit logs for repeated X server process restarts, which may indicate exploit attempts.
]]>highadvisoryvulnerabilitymemory-corruption