Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling

Summary

CVE	CVE-2026-33999
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2026-04-23 16:16:24 UTC
Updated	2026-07-15 02:20:27 UTC
Description	A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.

Risk And Classification

Primary CVSS: v3.1 7.8 HIGH from ADP

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.003800000 probability, percentile 0.302970000 (date 2026-07-18)

Problem Types: CWE-191 | CWE-191 Integer Underflow (Wrap or Wraparound)

Version	Source	Type	Score	Severity	Vector
3.1	ADP	CVSS	7.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	[email protected]	Secondary	7.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	Secondary	7.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	CNA	CVSS	7.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

CVSS v3.1 Breakdown

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Red Hat	Red Hat Enterprise Linux 10	unaffected 0:24.1.5-6.el10_1 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 10	unaffected 0:24.1.9-4.el10_2 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	unaffected 0:24.1.5-6.el10_0 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	unaffected 0:1.1.0-25.el6_10.16 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	unaffected 0:1.20.4-34.el7_9 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	unaffected 0:1.8.0-36.el7_9.4 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8	unaffected 0:21.1.3-20.el8_10 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8	unaffected 0:1.20.11-28.el8_10 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8	unaffected 0:1.15.0-9.el8_10 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected 0:1.20.10-4.el8_4 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected 0:1.11.0-8.el8_4.15 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	unaffected 0:1.20.10-4.el8_4 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	unaffected 0:1.11.0-8.el8_4.15 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected 0:21.1.3-2.el8_6.6 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected 0:1.20.11-7.el8_6 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected 0:1.12.0-6.el8_6.17 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	unaffected 0:1.12.0-6.el8_6.17 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	unaffected 0:21.1.3-2.el8_6.6 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	unaffected 0:1.20.11-7.el8_6 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions	unaffected 0:21.1.3-2.el8_6.6 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions	unaffected 0:1.20.11-7.el8_6 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected 0:21.1.3-13.el8_8 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected 0:1.20.11-18.el8_8 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected 0:1.12.0-15.el8_8.17 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions	unaffected 0:21.1.3-13.el8_8 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions	unaffected 0:1.20.11-18.el8_8 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions	unaffected 0:1.12.0-15.el8_8.17 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:1.15.0-6.el9_7.1 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:23.2.7-6.el9_7 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:1.20.11-33.el9_7 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:1.15.0-7.el9_8.1 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:1.20.11-34.el9_8 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:24.1.9-4.el9_8 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions	unaffected 0:21.1.3-5.el9_0 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions	unaffected 0:1.20.11-13.el9_0 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions	unaffected 0:1.11.0-22.el9_0.17 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions	unaffected 0:21.1.3-10.el9_2 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions	unaffected 0:1.20.11-20.el9_2 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions	unaffected 0:1.12.0-14.el9_2.14 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected 0:1.20.11-28.el9_4 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected 0:22.1.9-8.el9_4 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected 0:1.13.1-8.el9_4.9 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected 0:1.20.11-33.el9_6 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected 0:23.2.7-6.el9_6 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected 0:1.14.1-10.el9_6 * rpm	Not specified
CNA	Red Hat	Red Hat Enterprise Linux 6	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 10	unaffected 0:24.1.5-6.el10_1 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 10	unaffected 0:24.1.9-4.el10_2 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	unaffected 0:24.1.5-6.el10_0 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	unaffected 0:1.1.0-25.el6_10.16 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	unaffected 0:1.20.4-34.el7_9 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	unaffected 0:1.8.0-36.el7_9.4 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8	unaffected 0:21.1.3-20.el8_10 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8	unaffected 0:1.20.11-28.el8_10 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8	unaffected 0:1.15.0-9.el8_10 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected 0:1.20.10-4.el8_4 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected 0:1.11.0-8.el8_4.15 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	unaffected 0:1.20.10-4.el8_4 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	unaffected 0:1.11.0-8.el8_4.15 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected 0:21.1.3-2.el8_6.6 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected 0:1.20.11-7.el8_6 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected 0:1.12.0-6.el8_6.17 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	unaffected 0:1.12.0-6.el8_6.17 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	unaffected 0:21.1.3-2.el8_6.6 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	unaffected 0:1.20.11-7.el8_6 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions	unaffected 0:21.1.3-2.el8_6.6 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions	unaffected 0:1.20.11-7.el8_6 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected 0:21.1.3-13.el8_8 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected 0:1.20.11-18.el8_8 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected 0:1.12.0-15.el8_8.17 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions	unaffected 0:21.1.3-13.el8_8 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions	unaffected 0:1.20.11-18.el8_8 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions	unaffected 0:1.12.0-15.el8_8.17 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:1.15.0-6.el9_7.1 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:1.15.0-7.el9_8.1 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:23.2.7-6.el9_7 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:24.1.9-4.el9_8 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:1.20.11-33.el9_7 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9	unaffected 0:1.20.11-34.el9_8 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions	unaffected 0:21.1.3-5.el9_0 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions	unaffected 0:1.20.11-13.el9_0 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions	unaffected 0:1.11.0-22.el9_0.17 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions	unaffected 0:21.1.3-10.el9_2 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions	unaffected 0:1.20.11-20.el9_2 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions	unaffected 0:1.12.0-14.el9_2.14 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected 0:1.20.11-28.el9_4 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected 0:22.1.9-8.el9_4 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected 0:1.13.1-8.el9_4.9 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected 0:1.20.11-33.el9_6 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected 0:23.2.7-6.el9_6 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected 0:1.14.1-10.el9_6 * rpm	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 6	Not specified	Not specified

References

Reference	Source	Link	Tags
access.redhat.com/errata/RHSA-2026:24341	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:11692	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20562	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21699	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21742	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/security/cve/CVE-2026-33999	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20575	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:11656	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19342	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20590	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21716	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:23496	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:11388	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20560	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:23254	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33999.json	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	security.access.redhat.com
access.redhat.com/errata/RHSA-2026:10739	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20576	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20547	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19344	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22424	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
bugzilla.redhat.com/show_bug.cgi	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	bugzilla.redhat.com
access.redhat.com/errata/RHSA-2026:23255	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20561	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20555	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21741	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21712	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21718	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:11352	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:13414	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:11369	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20557	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20563	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20558	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22456	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21715	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19125	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19343	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Vendor Comments And Credit

Discovery Credit

CNA: Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue. (en)

Additional Advisory Data

Source	Time	Event
CNA	2026-03-25T06:29:19.544Z	Reported to Red Hat.
CNA	2026-04-23T14:11:12.550Z	Made public.
ADP	2026-03-25T06:29:19.544Z	Reported to Red Hat.
ADP	2026-04-23T14:11:12.550Z	Made public.

Solutions

ADP: RHSA-2026:23496: Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION), Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)

ADP: RHSA-2026:22456: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)

ADP: RHSA-2026:20590: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)

ADP: RHSA-2026:20563: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)

ADP: RHSA-2026:11352: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)

ADP: RHSA-2026:19125: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)

ADP: RHSA-2026:13414: Red Hat Enterprise Linux AppStream (v. 8)

ADP: RHSA-2026:11692: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)

ADP: RHSA-2026:11656: Red Hat Enterprise Linux AppStream (v. 8)

ADP: RHSA-2026:23254: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)

ADP: RHSA-2026:21715: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)

ADP: RHSA-2026:24341: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)

ADP: RHSA-2026:21718: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)

ADP: RHSA-2026:21716: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)

ADP: RHSA-2026:23255: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)

ADP: RHSA-2026:21742: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)

ADP: RHSA-2026:21712: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)

ADP: RHSA-2026:21741: Red Hat Enterprise Linux AppStream E4S (v.9.0)

ADP: RHSA-2026:21699: Red Hat Enterprise Linux AppStream E4S (v.9.0)

ADP: RHSA-2026:20562: Red Hat Enterprise Linux AppStream E4S (v.9.0)

ADP: RHSA-2026:20576: Red Hat Enterprise Linux AppStream E4S (v.9.2)

ADP: RHSA-2026:20557: Red Hat Enterprise Linux AppStream E4S (v.9.2)

ADP: RHSA-2026:20547: Red Hat Enterprise Linux AppStream E4S (v.9.2)

ADP: RHSA-2026:20575: Red Hat Enterprise Linux AppStream EUS (v.9.4)

ADP: RHSA-2026:20555: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)

ADP: RHSA-2026:20560: Red Hat Enterprise Linux AppStream EUS (v.9.4)

ADP: RHSA-2026:22424: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:20558: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:20561: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:10739: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:11388: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)

ADP: RHSA-2026:11369: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)

ADP: RHSA-2026:19342: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:19343: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)

ADP: RHSA-2026:19344: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)

Workarounds

CNA: To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.

ADP: To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.

There are currently no legacy QID mappings associated with this CVE.