HomeDefectsLIN1025-13932
Fixed

LIN1025-13932 : Security Advisory - xserver-xorg&xwayland - CVE-2026-34002

Created: May 5, 2026    Updated: Aug 31, 2026
Resolved Date: Aug 31, 2026
Found In Version: 10.25.33.2
Fix Version: 10.25.33.11
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Userspace

Description

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.