CVE-2026-56000
Fixed in a distro release EPSS <1%CVSS 9.0
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.
Products: X.Org xorg-x11-server, X.Org xwayland
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | xorg-x11-server-Xwayland | 24.1.9-4.el10_2.3 |
| AlmaLinux 10 | xorg-x11-server-Xwayland-devel | 24.1.9-4.el10_2.3 |
| AlmaLinux 9 | xorg-x11-server-Xwayland | 24.1.9-4.el9_8.3 |
| AlmaLinux 9 | xorg-x11-server-Xwayland-devel | 24.1.9-4.el9_8.3 |
| Amazon Linux 2023 | xorg-x11-server-Xwayland | 24.1.3-1.amzn2023.0.6 |
| Amazon Linux 2023 | xorg-x11-server-Xwayland-devel | 24.1.3-1.amzn2023.0.6 |
| Chainguard | xorg-server | 21.1.24-r0 |
| Debian 12 | xorg-server | no fix |
| Debian 12 | xwayland | no fix |
| Debian 13 | xorg-server | 2:21.1.16-1.3+deb13u4 |
| Debian 13 | xwayland | no fix |
| Debian 14 | xorg-server | 2:21.1.24-1 |
| Debian 14 | xwayland | 2:24.1.13-1 |
| Red Hat Enterprise Linux 10.2 | xorg-x11-server-Xwayland | 0:24.1.9-4.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | xorg-x11-server-Xwayland-debuginfo | 0:24.1.9-4.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | xorg-x11-server-Xwayland-debugsource | 0:24.1.9-4.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | xorg-x11-server-Xwayland-devel | 0:24.1.9-4.el10_2.3 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xwayland | 0:24.1.9-4.el9_8.3 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xwayland-debuginfo | 0:24.1.9-4.el9_8.3 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xwayland-debugsource | 0:24.1.9-4.el9_8.3 |
| Red Hat Enterprise Linux 9 | xorg-x11-server-Xwayland-devel | 0:24.1.9-4.el9_8.3 |
| Red Hat Enterprise Linux eus 10.0 | xorg-x11-server-Xwayland | 0:24.1.5-6.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | xorg-x11-server-Xwayland-debuginfo | 0:24.1.5-6.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | xorg-x11-server-Xwayland-debugsource | 0:24.1.5-6.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | xorg-x11-server-Xwayland-devel | 0:24.1.5-6.el10_0.2 |
| Red Hat rhel e4s 9.4 | xorg-x11-server-Xwayland | 0:22.1.9-8.el9_4.3 |
| Red Hat rhel e4s 9.4 | xorg-x11-server-Xwayland-debuginfo | 0:22.1.9-8.el9_4.3 |
| Red Hat rhel e4s 9.4 | xorg-x11-server-Xwayland-debugsource | 0:22.1.9-8.el9_4.3 |
| Red Hat rhel eus 9.6 | xorg-x11-server-Xwayland | 0:23.2.7-6.el9_6.3 |
| Red Hat rhel eus 9.6 | xorg-x11-server-Xwayland-debuginfo | 0:23.2.7-6.el9_6.3 |
| Red Hat rhel eus 9.6 | xorg-x11-server-Xwayland-debugsource | 0:23.2.7-6.el9_6.3 |
| Red Hat rhel eus 9.6 | xorg-x11-server-Xwayland-devel | 0:23.2.7-6.el9_6.3 |
| Rocky Linux 10 | xorg-x11-server-Xwayland | 0:24.1.9-4.el10_2.3 |
| Rocky Linux 9 | xorg-x11-server-Xwayland | 0:24.1.9-4.el9_8.3 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | xorg-x11-server | 1.20.3-150400.38.74.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | xorg-x11-server | 1.20.3-150400.38.74.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | xorg-x11-server | 21.1.4-150500.7.52.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | xorg-x11-server | 21.1.4-150500.7.52.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | xorg-x11-server | 21.1.15-150700.5.22.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | xorg-x11-server | 21.1.15-150700.5.22.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | xorg-x11-server | 1.20.3-150400.38.74.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | xorg-x11-server | 21.1.4-150500.7.52.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | xorg-x11-server | 21.1.11-150600.5.31.1 |
| SUSE Linux Enterprise Server 16.0 | xwayland | 24.1.6-160000.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | xorg-x11-server | 1.20.3-150400.38.74.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | xorg-x11-server | 21.1.4-150500.7.52.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | xorg-x11-server | 21.1.11-150600.5.31.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | xwayland | 24.1.6-160000.6.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP7 | xwayland | 24.1.5-150700.3.22.1 |
| Ubuntu 22.04 LTS | xorg-server | no fix |
| Ubuntu 22.04 LTS | xwayland | no fix |
| Ubuntu 24.04 LTS | xorg-server | no fix |
| Ubuntu 24.04 LTS | xwayland | no fix |
| Ubuntu 25.10 | xorg-server | no fix |
| Ubuntu 25.10 | xwayland | no fix |
| Ubuntu 26.04 LTS | xorg-server | no fix |
| Ubuntu 26.04 LTS | xwayland | no fix |
| Ubuntu 26.10 | xorg-server | no fix |
| Ubuntu 26.10 | xwayland | no fix |
| Ubuntu Pro 14.04 LTS | xorg-server | no fix |
| Ubuntu Pro 16.04 LTS | xorg-server | no fix |
| Ubuntu Pro 16.04 LTS | xorg-server-hwe-16.04 | no fix |
| Ubuntu Pro 18.04 LTS | xorg-server | no fix |
| Ubuntu Pro 18.04 LTS | xorg-server-hwe-18.04 | no fix |
| Ubuntu Pro 20.04 LTS | xorg-server | no fix |
| Wolfi | xorg-server | 21.1.24-r0 |
| openSUSE Leap 16.0 | xorg-x11-server | 21.1.15-160000.6.1 |
| openSUSE Leap 16.0 | xwayland | 24.1.6-160000.6.1 |
| openSUSE Tumbleweed | xorg-x11-server | 21.1.21-8.1 |
| openSUSE Tumbleweed | xwayland | 24.1.12-1.1 |