SUSE update for xorg-x11-server



Risk Low
Patch available YES
Number of vulnerabilities 8
CVE-ID CVE-2025-26594
CVE-2025-26595
CVE-2025-26596
CVE-2025-26597
CVE-2025-26598
CVE-2025-26599
CVE-2025-26600
CVE-2025-26601
CWE-ID CWE-416
CWE-119
CWE-122
CWE-787
CWE-824
Exploitation vector Local
Public exploit N/A
Vulnerable software
 SUSE Linux Enterprise Server 15 SP3
Operating systems & Components / Operating system

SUSE Linux Enterprise Workstation Extension 15
Operating systems & Components / Operating system

SUSE Linux Enterprise Server for SAP Applications 15
Operating systems & Components / Operating system

SUSE Linux Enterprise Server 15
Operating systems & Components / Operating system

SUSE Linux Enterprise Desktop 15
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing LTSS 15
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing 15
Operating systems & Components / Operating system

SUSE Enterprise Storage
Operating systems & Components / Operating system

xorg-x11-server-wayland
Operating systems & Components / Operating system package or component

xorg-x11-server-wayland-debuginfo
Operating systems & Components / Operating system package or component

xorg-x11-server
Operating systems & Components / Operating system package or component

xorg-x11-server-sdk
Operating systems & Components / Operating system package or component

xorg-x11-server-debuginfo
Operating systems & Components / Operating system package or component

xorg-x11-server-extra-debuginfo
Operating systems & Components / Operating system package or component

xorg-x11-server-debugsource
Operating systems & Components / Operating system package or component

xorg-x11-server-extra
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 8 vulnerabilities.

1) Use-after-free

EUVDB-ID: #VU104190

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-26594

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error of the root cursor. A local user can execute arbitrary code with elevated privileges.

Mitigation

Update the affected package xorg-x11-server to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP3: LTSS

SUSE Linux Enterprise Workstation Extension 15: SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP3 - SP6

SUSE Linux Enterprise Server 15: SP3 - SP6

SUSE Linux Enterprise Desktop 15: SP6

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

xorg-x11-server-wayland: before 1.20.3-150200.22.5.102.1

xorg-x11-server-wayland-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server: before 1.20.3-150200.22.5.102.1

xorg-x11-server-sdk: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debugsource: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra: before 1.20.3-150200.22.5.102.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2025/suse-su-20250733-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Buffer overflow

EUVDB-ID: #VU104191

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-26595

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the XkbVModMaskText() function. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package xorg-x11-server to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP3: LTSS

SUSE Linux Enterprise Workstation Extension 15: SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP3 - SP6

SUSE Linux Enterprise Server 15: SP3 - SP6

SUSE Linux Enterprise Desktop 15: SP6

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

xorg-x11-server-wayland: before 1.20.3-150200.22.5.102.1

xorg-x11-server-wayland-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server: before 1.20.3-150200.22.5.102.1

xorg-x11-server-sdk: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debugsource: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra: before 1.20.3-150200.22.5.102.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2025/suse-su-20250733-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Heap-based buffer overflow

EUVDB-ID: #VU104192

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-26596

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the XkbWriteKeySyms() function. A local user can  trigger a heap-based buffer overflow and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package xorg-x11-server to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP3: LTSS

SUSE Linux Enterprise Workstation Extension 15: SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP3 - SP6

SUSE Linux Enterprise Server 15: SP3 - SP6

SUSE Linux Enterprise Desktop 15: SP6

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

xorg-x11-server-wayland: before 1.20.3-150200.22.5.102.1

xorg-x11-server-wayland-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server: before 1.20.3-150200.22.5.102.1

xorg-x11-server-sdk: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debugsource: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra: before 1.20.3-150200.22.5.102.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2025/suse-su-20250733-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Buffer overflow

EUVDB-ID: #VU104193

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-26597

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the XkbChangeTypesOfKey() function. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package xorg-x11-server to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP3: LTSS

SUSE Linux Enterprise Workstation Extension 15: SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP3 - SP6

SUSE Linux Enterprise Server 15: SP3 - SP6

SUSE Linux Enterprise Desktop 15: SP6

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

xorg-x11-server-wayland: before 1.20.3-150200.22.5.102.1

xorg-x11-server-wayland-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server: before 1.20.3-150200.22.5.102.1

xorg-x11-server-sdk: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debugsource: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra: before 1.20.3-150200.22.5.102.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2025/suse-su-20250733-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Out-of-bounds write

EUVDB-ID: #VU104194

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-26598

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the CreatePointerBarrierClient() function. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package xorg-x11-server to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP3: LTSS

SUSE Linux Enterprise Workstation Extension 15: SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP3 - SP6

SUSE Linux Enterprise Server 15: SP3 - SP6

SUSE Linux Enterprise Desktop 15: SP6

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

xorg-x11-server-wayland: before 1.20.3-150200.22.5.102.1

xorg-x11-server-wayland-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server: before 1.20.3-150200.22.5.102.1

xorg-x11-server-sdk: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debugsource: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra: before 1.20.3-150200.22.5.102.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2025/suse-su-20250733-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Access of uninitialized pointer

EUVDB-ID: #VU104195

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-26599

CWE-ID: CWE-824 - Access of Uninitialized Pointer

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to usage of an uninitialized pointer within the compRedirectWindow() function. A local user can execute arbitrary code with elevated privileges.

Mitigation

Update the affected package xorg-x11-server to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP3: LTSS

SUSE Linux Enterprise Workstation Extension 15: SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP3 - SP6

SUSE Linux Enterprise Server 15: SP3 - SP6

SUSE Linux Enterprise Desktop 15: SP6

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

xorg-x11-server-wayland: before 1.20.3-150200.22.5.102.1

xorg-x11-server-wayland-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server: before 1.20.3-150200.22.5.102.1

xorg-x11-server-sdk: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debugsource: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra: before 1.20.3-150200.22.5.102.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2025/suse-su-20250733-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Use-after-free

EUVDB-ID: #VU104196

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-26600

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the PlayReleasedEvents() function. A local user can execute arbitrary code with elevated privileges.

Mitigation

Update the affected package xorg-x11-server to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP3: LTSS

SUSE Linux Enterprise Workstation Extension 15: SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP3 - SP6

SUSE Linux Enterprise Server 15: SP3 - SP6

SUSE Linux Enterprise Desktop 15: SP6

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

xorg-x11-server-wayland: before 1.20.3-150200.22.5.102.1

xorg-x11-server-wayland-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server: before 1.20.3-150200.22.5.102.1

xorg-x11-server-sdk: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debugsource: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra: before 1.20.3-150200.22.5.102.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2025/suse-su-20250733-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Use-after-free

EUVDB-ID: #VU104197

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-26601

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the SyncInitTrigger() function. A local user can execute arbitrary code with elevated privileges.

Mitigation

Update the affected package xorg-x11-server to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP3: LTSS

SUSE Linux Enterprise Workstation Extension 15: SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP3 - SP6

SUSE Linux Enterprise Server 15: SP3 - SP6

SUSE Linux Enterprise Desktop 15: SP6

SUSE Linux Enterprise High Performance Computing LTSS 15: SP3

SUSE Linux Enterprise High Performance Computing 15: SP3

SUSE Enterprise Storage: 7.1

xorg-x11-server-wayland: before 1.20.3-150200.22.5.102.1

xorg-x11-server-wayland-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server: before 1.20.3-150200.22.5.102.1

xorg-x11-server-sdk: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra-debuginfo: before 1.20.3-150200.22.5.102.1

xorg-x11-server-debugsource: before 1.20.3-150200.22.5.102.1

xorg-x11-server-extra: before 1.20.3-150200.22.5.102.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2025/suse-su-20250733-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###