NetSight
IP …
high7.3

CVE-2025-62230

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.

Impact

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.

Affected products

VendorProductAffected versions
X.OrgX Server
before 21.1.19
X.OrgXwayland
before 24.1.9
IbmVios
from 4.1.0 before 4.1.1.30
Version 4.1.2.0
IbmAix
from 7.2.5 before 7.2.5.12
from 7.3.2 before 7.3.3.3
Version 7.3.4
DebianDebian Linux
Version 11.0
RedhatEnterprise Linux
Versions 8.0, 9.0, 10.0
RedhatEnterprise Linux Aus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Els
Versions 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 8.4, 9.4
RedhatEnterprise Linux Tus
Versions 8.6, 8.8
RedhatEnterprise Linux Update Services For Sap Solutions
Versions 8.6, 8.8, 9.0, 9.2

Weakness classification

CWE-416

References