Live › vulnerability › CVE-2026-88812
Go to dashboardA double free in the XKB SetGeometry handling of X.Org X Server and X Wayland lets a connected client crash the server or possibly run code in the server's context. The sources describe the flaw but do not give exploit details.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 18:33 UTC. All times on this page are UTC.
Systems running X.Org X Server before or X Wayland before where clients can connect to the server. The sources do not say which default configurations expose the XKB SetGeometry path, so the affected set beyond these versions is unknown. Systems on patched versions can skip it.
21.1.2524.1.14No product ranges from the sources yet.
Xorg -version or X -version to read the installed X.Org X Server versionXwayland -version to read the installed X Wayland version21.1.25 or later24.1.14 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
This page as .md · .json · in your agent: get_signal("CVE-2026-88812")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.