High severity7.8NVD Advisory· Published Feb 25, 2025· Updated Apr 6, 2026

CVE-2025-26594

Description

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tigervnc/Tigervnc
cpe:2.3:a:tigervnc:tigervnc:-:*:*:*:*:*:*:*
Xorg/Xserver
cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*
Range: <21.1.16
Xorg/Xwayland2 versions
cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*range: <24.1.6
- (no CPE)
Red Hat/Enterprise Linux Server3 versions
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Xorg/X.orgllm-fuzzy
osv-coords41 versions
pkg:rpm/almalinux/tigervnc pkg:rpm/almalinux/tigervnc-icons pkg:rpm/almalinux/tigervnc-license pkg:rpm/almalinux/tigervnc-selinux pkg:rpm/almalinux/tigervnc-server pkg:rpm/almalinux/tigervnc-server-minimal pkg:rpm/almalinux/tigervnc-server-module pkg:rpm/almalinux/xorg-x11-server-common pkg:rpm/almalinux/xorg-x11-server-devel pkg:rpm/almalinux/xorg-x11-server-source pkg:rpm/almalinux/xorg-x11-server-Xdmx pkg:rpm/almalinux/xorg-x11-server-Xephyr pkg:rpm/almalinux/xorg-x11-server-Xnest pkg:rpm/almalinux/xorg-x11-server-Xorg pkg:rpm/almalinux/xorg-x11-server-Xvfb pkg:rpm/almalinux/xorg-x11-server-Xwayland pkg:rpm/almalinux/xorg-x11-server-Xwayland-devel pkg:rpm/opensuse/xorg-x11-server&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/xorg-x11-server&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/xwayland&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/xwayland&distro=openSUSE%20Tumbleweed pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP6 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/xwayland&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP6
< 1.14.1-1.el9_5.1+ 40 more
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 23.2.7-3.el9_6
- (no CPE)range: < 23.2.7-3.el9_6
- (no CPE)range: < 21.1.11-150600.5.6.1
- (no CPE)range: < 21.1.15-2.1
- (no CPE)range: < 24.1.1-150600.5.9.1
- (no CPE)range: < 24.1.5-2.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 21.1.11-150600.5.6.1
- (no CPE)range: < 21.1.11-150600.5.6.1
- (no CPE)range: < 1.19.6-10.80.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 1.19.6-10.80.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 24.1.1-150600.5.9.1

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2025:2500nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2502nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2861nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2862nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2865nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2866nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2873nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2874nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2875nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2879nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2880nvdThird Party Advisory
access.redhat.com/security/cve/CVE-2025-26594nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue Tracking
access.redhat.com/errata/RHSA-2025:3976nvd
access.redhat.com/errata/RHSA-2025:7163nvd
access.redhat.com/errata/RHSA-2025:7165nvd
access.redhat.com/errata/RHSA-2025:7458nvd
lists.debian.org/debian-lts-announce/2025/02/msg00036.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000