CLSA-2026-1792791669
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792791669.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792791669
- Upstream
CVE (8)
- CVE-2026-88812
- CVE-2026-93516
- CVE-2026-93517
- CVE-2026-93518
- CVE-2026-93519
- CVE-2026-93521
- CVE-2026-93522
- CVE-2026-93523
- Published
- 2026-10-23T21:41:29Z
- Modified
- 2026-10-26T09:31:37Z
- Summary
- xorg-x11-server-Xwayland: Fix of 8 CVEs
- Details
-
- CVE-2026-88812: Use-after-free/double free in XKB _CheckSetDoodad: doodad text pointer left dangling after free when reading the font string fails
- CVE-2026-93516: Use-after-free in DIX: passive grabs keep dangling pointers to a removed input device (grab->device / modifierDevice)
- CVE-2026-93517: Out-of-bounds read in GLX RenderLarge: dataBytes of the first request not validated against the request length
- CVE-2026-93518: Heap buffer overflow in XKB key resize: 16-bit size_syms/num_syms/size_acts/num_acts truncate computed sizes, undersizing allocations
- CVE-2026-93519: Out-of-bounds write in XInput barrier handling: input_constrain_cursor writes barrier events without a bounds check
- CVE-2026-93521: Heap memory corruption in RandR RRChangeProviderProperty PrependMode due to wrong size and offset when shifting old data
- CVE-2026-93522: Heap buffer overflow in glamor_upload_boxes: tmp_bits sized from pixmap height, not the source coordinate range
- CVE-2026-93523: Out-of-bounds access in XInput ProcXIPassiveUngrabDevice: client-supplied modifier values are not validated
- References
-
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792791669.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-88812
- https://nvd.nist.gov/vuln/detail/CVE-2026-93516
- https://nvd.nist.gov/vuln/detail/CVE-2026-93517
- https://nvd.nist.gov/vuln/detail/CVE-2026-93518
- https://nvd.nist.gov/vuln/detail/CVE-2026-93519
- https://nvd.nist.gov/vuln/detail/CVE-2026-93521
- https://nvd.nist.gov/vuln/detail/CVE-2026-93522
- https://nvd.nist.gov/vuln/detail/CVE-2026-93523
Affected packages
TuxCare:AlmaLinux:9.6 / xorg-x11-server-Xwayland
Package
- Name
- xorg-x11-server-Xwayland
- Purl
- pkg:rpm/tuxcare/xorg-x11-server-Xwayland?distro=almalinux-9.6