| Package | Affected versions | Patched versions |
|---|---|---|
| x server | < 21.1.16 | 21.1.16 |
| xwayland | < 24.1.6 | 24.1.6 |
A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free