The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763647564 advisory.

  - An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a     device frozen by a sync grab is reattached to a different master device. This issue may lead to an     application crash, local privilege escalation (if the server runs with extended privileges), or remote     code execution in SSH X11 forwarding environments. (CVE-2024-0229)

  - A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of     private at creation. It uses the cursor bits type with the cursor as private, and when initiating the     cursor, that overwrites the XSELINUX context. (CVE-2024-0409)

  - A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a     global variable. If a client frees the root cursor, the internal reference points to freed memory and     causes a use-after-free. (CVE-2025-26594)

  - A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group,     it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is     later called with a non-zero value of groups, this will cause a buffer overflow because the key actions     are of the wrong size. (CVE-2025-26597)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0279 advisory.

    This advisory aggregates security fixes for the xorg-x11-server SRPM in CIQ LTS 8.6. It addresses 14 CVEs:
    CVE-2024-31083, CVE-2023-5380, CVE-2023-5367, CVE-2023-6377, CVE-2024-0229, and 9 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0355 advisory.

    This advisory aggregates security fixes for the xorg-x11-server-Xwayland SRPM in CIQ LTS 8.8. It addresses     14 CVEs: CVE-2024-31083, CVE-2023-5367, CVE-2023-6377, CVE-2024-0229, CVE-2024-0408, and 9 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1039 advisory.

    This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 9.2. It addresses 7 CVEs:
    CVE-2023-5367, CVE-2023-6377, CVE-2024-0229, CVE-2023-6816, CVE-2023-6478, and 2 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0505 advisory.

    This advisory aggregates security fixes for the xorg-x11-server-Xwayland SRPM in CIQ LTS 9.2. It addresses     13 CVEs: CVE-2024-31083, CVE-2023-5367, CVE-2023-6377, CVE-2024-0229, CVE-2024-0408, and 8 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
352099	AlmaLinux 9.2 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1763647564)	Nessus	Alma Linux Local Security Checks	9/30/2026	9/30/2026	high
354155	Rocky Linux 8.6 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0279)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical
354980	Rocky Linux 8.8 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0355)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical
355446	Rocky Linux 9.2 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_1039)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical
356930	Rocky Linux 9.2 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0505)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical

Detections

Analytics

Plugins Search

high

critical

critical

critical

critical