Log in Start free

Vulnerability · Published Oct 27, 2026 · Assigned by suse

CVE-2026-88812X.Org Server XKB SetGeometry TextDoodad Double Free

High 7.8

In plain English

A high-severity double free in xorg-x11-server from X.org. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 91.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8xorg-x11-server-Xdmx1.20.11-28.el8_10.5ALSA-2026:89747
AlmaLinux:9xorg-x11-server-Xdmx1.20.11-34.el9_8.4ALSA-2026:82015
AlmaLinux:8xorg-x11-server-Xephyr1.20.11-28.el8_10.5ALSA-2026:89747
AlmaLinux:9xorg-x11-server-Xephyr1.20.11-34.el9_8.4ALSA-2026:82015
AlmaLinux:8xorg-x11-server-Xnest1.20.11-28.el8_10.5ALSA-2026:89747
AlmaLinux:9xorg-x11-server-Xnest1.20.11-34.el9_8.4ALSA-2026:82015
AlmaLinux:8xorg-x11-server-Xorg1.20.11-28.el8_10.5ALSA-2026:89747
AlmaLinux:9xorg-x11-server-Xorg1.20.11-34.el9_8.4ALSA-2026:82015
AlmaLinux:8xorg-x11-server-Xvfb1.20.11-28.el8_10.5ALSA-2026:89747
AlmaLinux:9xorg-x11-server-Xvfb1.20.11-34.el9_8.4ALSA-2026:82015
AlmaLinux:10xorg-x11-server-Xwayland24.1.9-4.el10_2.4ALSA-2026:85191
AlmaLinux:8xorg-x11-server-Xwayland21.1.3-20.el8_10.4ALSA-2026:86907
AlmaLinux:9xorg-x11-server-Xwayland24.1.9-4.el9_8.4ALSA-2026:85193
AlmaLinux:10xorg-x11-server-Xwayland-devel24.1.9-4.el10_2.4ALSA-2026:85191
AlmaLinux:9xorg-x11-server-Xwayland-devel24.1.9-4.el9_8.4ALSA-2026:85193
AlmaLinux:8xorg-x11-server-common1.20.11-28.el8_10.5ALSA-2026:89747
AlmaLinux:9xorg-x11-server-common1.20.11-34.el9_8.4ALSA-2026:82015
AlmaLinux:8xorg-x11-server-devel1.20.11-28.el8_10.5ALSA-2026:89747
AlmaLinux:9xorg-x11-server-devel1.20.11-34.el9_8.4ALSA-2026:82015
AlmaLinux:8xorg-x11-server-source1.20.11-28.el8_10.5ALSA-2026:89747
AlmaLinux:9xorg-x11-server-source1.20.11-34.el9_8.4ALSA-2026:82015
Alpine:v3.24xorg-server21.1.25-r0ALPINE-CVE-2026-88812
Alpine:v3.24xwayland24.1.14-r0ALPINE-CVE-2026-88812
Debian:12xorg-serverno fix listedDEBIAN-CVE-2026-88812
Debian:13xorg-serverno fix listedDEBIAN-CVE-2026-88812
Debian:14xorg-server2:21.1.25-1DEBIAN-CVE-2026-88812
Debian:12xwaylandno fix listedDEBIAN-CVE-2026-88812
Debian:13xwaylandno fix listedDEBIAN-CVE-2026-88812
Debian:14xwayland2:24.1.14-1DEBIAN-CVE-2026-88812
Rocky Linux:8xorg-x11-server0:1.20.11-28.el8_10.5RLSA-2026:89747
Rocky Linux:9xorg-x11-server0:1.20.11-34.el9_8.4RLSA-2026:82015
Rocky Linux:10xorg-x11-server-Xwayland0:24.1.9-4.el10_2.4RLSA-2026:85191
Rocky Linux:8xorg-x11-server-Xwayland0:21.1.3-20.el8_10.4RLSA-2026:86907
Rocky Linux:9xorg-x11-server-Xwayland0:24.1.9-4.el9_8.4RLSA-2026:85193
Ubuntu:22.04:LTSxorg-serverno fix listedUBUNTU-CVE-2026-88812
Ubuntu:24.04:LTSxorg-serverno fix listedUBUNTU-CVE-2026-88812
Ubuntu:26.04:LTSxorg-serverno fix listedUBUNTU-CVE-2026-88812
Ubuntu:26.10xorg-serverno fix listedUBUNTU-CVE-2026-88812
Ubuntu:22.04:LTSxwaylandno fix listedUBUNTU-CVE-2026-88812
Ubuntu:24.04:LTSxwaylandno fix listedUBUNTU-CVE-2026-88812
Ubuntu:26.04:LTSxwaylandno fix listedUBUNTU-CVE-2026-88812
Ubuntu:26.10xwaylandno fix listedUBUNTU-CVE-2026-88812

Affected products (as reported)

VendorProductVersions
X.org xorg-x11-server 0 – before 21.1.25
x.org xwayland 0 – before 24.1.14

Weakness: CWE-415 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References