XWAYLAND · CVE-2026-109904 · Infrastructure
NO FIX YET · SEE WHAT TO DO
An integer overflow in the XRes extension's QueryClientIds handler causes a buffer overread in Xwayland before 24.1.15 and X Server before 21.1.26. An attacker with an authenticated X client can crash the server or leak memory contents.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Systems running Xwayland before 24.1.15 or X Server before 21.1.26 where clients can authenticate to the X server. The sources do not say whether the XRes extension must be enabled by default, so whether a given install is reachable is unknown. Desktop users on current distributions with patched packages are not exposed.
Not affected if no-authenticated-x-clients, patched-version
Who cares linux, x-server, x.org, xwayland
Xwayland -version and the X Server version with Xorg -version.24.1.15 or later.21.1.26 or later.A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by attackers on authenticated X clients to crash the server or leak out information.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.