Ready to be published? LXer is read by around 350,000 individuals each month, and is an excellent place for you to publish your ideas, thoughts, reviews, complaints, etc. Do you have something to say to the Linux community?
The XOrg Server 21.1.26 and Xwayland 24.1.15 display implementations have been released today, November 10th, 2026, patching multiple security vulnerabilities that could lead to crashes and corrupt memory.
The fixes include CVE-2026-109091, a vulnerability that could allow a malicious monitor or crafted EDID to supply extra descriptors that overrun those arrays and clobber adjacent MonRec fields (Modes, Last, DDC), causing an out-of-bounds write that can crash the server or corrupt memory.
Also fixed is CVE-2026-109092, a shared-memory bounds overflow in XvShmPutImage, where a negative size value combined with a crafted offset can wrap an addition and bypass bounds checking, passing an invalid source pointer to PutImage and potentially enabling an out-of-bounds read or write in the server.
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
