Corrective releases for X.Org Server 21.1.19 and the DDX component (Device-Dependent X) xwayland 24.1.9 have been published, allowing the X.Org Server to run X11 applications in Wayland-based environments. The new versions fix 3 vulnerabilities rated at 7.8 out of 10 in terms of severity. These issues could potentially be exploited for privilege escalation in systems where the X server runs with root privileges, as well as for remote code execution in configurations utilizing X11 session redirection via SSH.
Fixed vulnerabilities:
- CVE-2025-62229 — use after free in the XPresentNotify structure creation code. The issue occurs in the implementation of the X11 Present extension and leads to leaving a pointer to a freed present_notify object in case of an error during handling and adding notifications after presenting the pixel map. This vulnerability has been present since the release of Xorg 1.15 (2013).
- CVE-2025-62230 — use after free when removing Xkb resources for a client. The XkbRemoveResourceClient() function freed memory allocated for XkbInterest data associated with a device but left the resources connected to it. This vulnerability has been present since the release of X11R6 (1994).
- CVE-2025-62231 — integer overflow in the Xkb extension. In the XkbCompatMap structure, values were stored with the type 'unsigned short', but checks were not performed to ensure that the input value could not exceed the upper limit of this type. This vulnerability has been present since the release of X11R6 (1994).
A corrective release of X.Org Server 21.1.20 has been formed on the heels of a problem that caused a failure during assembly using the Meson build system.
Source: opennet.ru
