Wind River Support Network

HomeDefectsLIN1023-3360
Fixed

LIN1023-3360 : Security Advisory - xserver-xorg - CVE-2024-0409

Created: Jan 16, 2024    Updated: Mar 31, 2025
Resolved Date: Mar 24, 2025
Found In Version: 10.23.30.1
Fix Version: 10.23.30.16
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.

https://nvd.nist.gov/vuln/detail/CVE-2024-0409

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube