CVE-2025-62229

Name of the Vulnerable Software and Affected Versions X.Org X Server and Xwayland versions 2:21.1.16-1ubuntu1.2 through 2:24.1.6-1ubuntu0.2

Description A flaw exists in the X.Org X server and Xwayland when handling X11 Present extension notifications. Improper error handling during notification creation can result in dangling pointers, leading to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.

Recommendations Update xnest to version 2:21.1.16-1ubuntu1.2. Update xorg-server-source to version 2:21.1.16-1ubuntu1.2. Update xserver-common to version 2:21.1.16-1ubuntu1.2. Update xserver-xephyr to version 2:21.1.16-1ubuntu1.2. Update xserver-xorg-core to version 2:21.1.16-1ubuntu1.2. Update xserver-xorg-dev to version 2:21.1.16-1ubuntu1.2. Update xserver-xorg-legacy to version 2:21.1.16-1ubuntu1.2. Update xvfb to version 2:21.1.16-1ubuntu1.2. Update xwayland to version 2:24.1.6-1ubuntu0.2.