Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux Xwayland can let attackers run code
published 1 day ago
Summary
The Xwayland component that lets older X applications work on Wayland in AlmaLinux has a flaw that could let a malicious program write beyond its intended memory area. This could allow an attacker to execute their own code on the affected system. Apply the latest security update for the xorg-x11-server-xwayland package as soon as possible.
What to do
- Update almalinux xorg-x11-server-xwayland to version 21.1.3-20.el8_10.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | xorg-x11-server-xwayland |
< 21.1.3-20.el8_10.5 Fix: upgrade to 21.1.3-20.el8_10.5
|
Original advisory text
Moderate: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland.
Security Fix(es):
* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:95281 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-93520 Third Party Advisory
- https://bugzilla.redhat.com/2545908 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2026-95281.html Vendor Advisory
Timeline
Published4 Nov 2026
Updated4 Nov 2026
First seen4 Nov 2026
Sources
ALSA-2026:95281 · OSV
Track software like this
Free during beta