CLSA-2026-1788372946

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1788372946
Upstream
CVE (5)
Published
2026-09-02T18:15:59Z
Modified
2026-10-26T09:31:56Z
Summary
xorg-x11-server: Fix of 5 CVEs
Details
  • CVE-2026-50257: fix use-after-free in miSyncDestroyFence() when a fence is destroyed while an Await group still references it
  • CVE-2026-50258: fix stack buffer overflow in XKB CheckKeyTypes() by rejecting key types whose numLevels exceeds XkbMaxShiftLevel
  • CVE-2026-50259: fix stack buffer overflow in XKB CheckKeyTypes() by clamping nMaps to the mapWidths buffer size
  • CVE-2026-50260: fix use-after-free in FreeCounter() when a SyncCounter is destroyed while an Await group still references it
  • CVE-2026-50261: fix use-after-free in SyncChangeCounter() by restarting trigger list iteration after a trigger fires
References

Affected packages

TuxCare:OracleLinux:7
xorg-x11-server-Xdmx

Package

Name
xorg-x11-server-Xdmx
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xdmx?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json"
xorg-x11-server-Xephyr

Package

Name
xorg-x11-server-Xephyr
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xephyr?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json"
xorg-x11-server-Xnest

Package

Name
xorg-x11-server-Xnest
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xnest?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json"
xorg-x11-server-Xorg

Package

Name
xorg-x11-server-Xorg
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xorg?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json"
xorg-x11-server-Xvfb

Package

Name
xorg-x11-server-Xvfb
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xvfb?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json"
xorg-x11-server-Xwayland

Package

Name
xorg-x11-server-Xwayland
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xwayland?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json"
xorg-x11-server-common

Package

Name
xorg-x11-server-common
Purl
pkg:rpm/tuxcare/xorg-x11-server-common?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json"
xorg-x11-server-devel

Package

Name
xorg-x11-server-devel
Purl
pkg:rpm/tuxcare/xorg-x11-server-devel?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json"
xorg-x11-server-source

Package

Name
xorg-x11-server-source
Purl
pkg:rpm/tuxcare/xorg-x11-server-source?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els11

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1788372946.json"