CVE-2026-50259
EUVD-2026-3481405.06.2026, 12:16
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The helper function CheckKeyTypes() writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This may be used to crash the server, or for privilege escalation if the X server runs as root.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| x.org | x_server | 𝑥 < 21.1.23 |
| x.org | xwayland | 𝑥 < 24.1.12 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:24.1.9-4.el10_2.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:24.1.5-6.el10_0.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | 0:1.20.4-35.el7_9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:21.1.3-20.el8_10.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:1.20.11-28.el8_10.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:1.15.0-10.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:1.20.10-5.el8_4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | 0:1.20.10-5.el8_4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:1.20.11-8.el8_6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:21.1.3-2.el8_6.7 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | 0:1.20.11-8.el8_6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | 0:21.1.3-2.el8_6.7 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:1.20.11-19.el8_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:21.1.3-13.el8_8.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:1.20.11-19.el8_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:21.1.3-13.el8_8.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:24.1.9-4.el9_8.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:1.20.11-34.el9_8.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:1.15.0-7.el9_8.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:1.20.11-21.el9_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:21.1.3-10.el9_2.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 0:1.20.11-29.el9_4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 0:22.1.9-8.el9_4.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:1.20.11-34.el9_6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:23.2.7-6.el9_6.1 ≤ 𝑥 < * | ADP |
Debian Releases
Debian Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| xorg-server |
| ||||||||||||||||
| xwayland |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| tigervnc |
| ||||||||||||
| tigervnc-icons |
| ||||||||||||
| tigervnc-license |
| ||||||||||||
| tigervnc-selinux |
| ||||||||||||
| tigervnc-server |
| ||||||||||||
| tigervnc-server-minimal |
| ||||||||||||
| tigervnc-server-module |
| ||||||||||||
| xorg-x11-server-Xdmx |
| ||||||||||||
| xorg-x11-server-Xephyr |
| ||||||||||||
| xorg-x11-server-Xnest |
| ||||||||||||
| xorg-x11-server-Xorg |
| ||||||||||||
| xorg-x11-server-Xvfb |
| ||||||||||||
| xorg-x11-server-Xwayland |
| ||||||||||||
| xorg-x11-server-Xwayland-devel |
| ||||||||||||
| xorg-x11-server-common |
| ||||||||||||
| xorg-x11-server-devel |
| ||||||||||||
| xorg-x11-server-source |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| tigervnc |
| ||||
| tigervnc-debuginfo |
| ||||
| tigervnc-debugsource |
| ||||
| tigervnc-icons |
| ||||
| tigervnc-license |
| ||||
| tigervnc-selinux |
| ||||
| tigervnc-server |
| ||||
| tigervnc-server-applet |
| ||||
| tigervnc-server-debuginfo |
| ||||
| tigervnc-server-minimal |
| ||||
| tigervnc-server-minimal-debuginfo |
| ||||
| tigervnc-server-module |
| ||||
| tigervnc-server-module-debuginfo |
| ||||
| xorg-x11-server-Xdmx |
| ||||
| xorg-x11-server-Xephyr |
| ||||
| xorg-x11-server-Xephyr-debuginfo |
| ||||
| xorg-x11-server-Xnest |
| ||||
| xorg-x11-server-Xnest-debuginfo |
| ||||
| xorg-x11-server-Xorg |
| ||||
| xorg-x11-server-Xorg-debuginfo |
| ||||
| xorg-x11-server-Xvfb |
| ||||
| xorg-x11-server-Xvfb-debuginfo |
| ||||
| xorg-x11-server-Xwayland |
| ||||
| xorg-x11-server-Xwayland-debuginfo |
| ||||
| xorg-x11-server-Xwayland-debugsource |
| ||||
| xorg-x11-server-Xwayland-devel |
| ||||
| xorg-x11-server-common |
| ||||
| xorg-x11-server-debuginfo |
| ||||
| xorg-x11-server-debugsource |
| ||||
| xorg-x11-server-devel |
| ||||
| xorg-x11-server-source |
|
Azure Linux Releases
Common Weakness Enumeration
Vulnerability Media Exposure
References