CVE-2025-62230

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.

Score
CVSS 3.1 7.3 High
Status
Analyzed - secalert@redhat.com
Published
2025-10-30
Last modified
2026-04-20
Weaknesses
CWE-416

Affected products

References

 
 
© AVABIS GmbH privacypolicy about