Maple Labs

CVE search · CVE-2025-62230

CVE-2025-62230

high 7.3

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
secalert@redhat.com
Weakness
CWE-416

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H secalert@redhat.comSecondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • x.org · x_server
  • x.org · xwayland
  • ibm · vios
  • ibm · aix
  • debian · debian_linux
  • redhat · enterprise_linux
  • redhat · enterprise_linux_aus
  • redhat · enterprise_linux_els
  • redhat · enterprise_linux_eus
  • redhat · enterprise_linux_tus
  • redhat · enterprise_linux_update_services_for_sap_solutions

References