CVE-2026-88812

Description

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

References

https://gitlab.freedesktop.org/xorg/xserver/-/commit/0d1b1b0bad86c9ea2a3b7ca5a70e681dc69f1ecc

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-111276

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3