CVE-2022-49737

In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.7 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
mitreCNA
7.7 HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
CISA-ADPADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xorg
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
xorg-hwe-16.04
oracular
dne
noble
dne
jammy
dne
focal
dne
xenial
not-affected
xorg-hwe-18.04
oracular
dne
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xorg-server
oracular
needs-triage
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
xorg-server-hwe-16.04
oracular
dne
noble
dne
jammy
dne
focal
dne
xenial
needs-triage
xorg-server-hwe-18.04
oracular
dne
noble
dne
jammy
dne
focal
dne
bionic
needs-triage
xwayland
oracular
needs-triage
noble
needs-triage
jammy
needs-triage
focal
dne
Common Weakness Enumeration
References
https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=1081338;filename=dix-Hold-input-lock-for-AttachDevice.patch;msg=5
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1081338
https://gitlab.freedesktop.org/xorg/xserver/-/commit/dc7cb45482cea6ccec22d117ca0b489500b4d0a0
https://gitlab.freedesktop.org/xorg/xserver/-/issues/1260
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1081338