medium5.5
CVE-2026-93516
A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.…
Impact
A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X Clients to crash the X server or potentially execute code in X server context.
Affected products
| Product | Affected versions |
|---|---|
| X.Org X Server | before 21.1.25 |
| XWayland | before 24.1.14 |
Versions were read from the advisory text. No structured product data has been published for this record yet.