Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Xorg X server can crash from crafted graphics request
published 3 months ago
Summary
The Xorg X server (azure/xorg-x11-server) can be forced to free memory it still needs when a local user sends a specially crafted graphics command. This could make the server unstable or cause it to stop working, potentially disrupting users on that machine. Apply the latest updates for the X server to prevent this condition.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | xorg-x11-server | <= 1.20.10-6 |
Original advisory text
CVE-2026-56000 affecting package xorg-x11-server 1.20.10-6
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.
References
Timeline
Published8 Jul 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-92072 · OSV
Track software like this
Free during beta