CVE-2026-50260

Name of the Vulnerable Software and Affected Versions X.Org X server (affected versions not specified) Xwayland (affected versions not specified)

Description A use-after-free flaw exists in the FreeCounter() function. This occurs when a client establishes multiple SyncCounters and awaits their triggers, then destroys those counters through a second client connection. This flaw can lead to a server crash or privilege escalation if the X server is running with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.