Wind River Support Network

HomeDefectsLIN1022-6258
Fixed

LIN1022-6258 : Security Advisory - xserver-xorg - CVE-2024-0409

Created: Jan 16, 2024    Updated: Feb 18, 2025
Resolved Date: Mar 20, 2024
Found In Version: 10.22.33.1
Fix Version: 10.22.33.15
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.

https://nvd.nist.gov/vuln/detail/CVE-2024-0409

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube