Ray Strode

The issue concerns the gesture handling code, allowing physically proximate attackers to bypass the lock screen via certain mouse or touch gestures.

The issue concerns the authentication setup in XWayland, which starts the server in non-authenticating mode. This allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.

The issue allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, due to improper synchronization of the state of screen locking and the unlock dialog in situations involving a change to the number of monitors.

The issue allows physically proximate attackers to bypass screen locking and access an unattended workstation. This can be achieved by moving the mouse position to an external monitor and then disconnecting that monitor.