CVE-2025-26600

HIGH

Tigervnc < 21.1.16 - Use After Free

Title source: rule

Description

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free.

References (18)

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2500

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2502

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2861

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2862

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2865

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2866

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2873

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2874

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2875

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2879

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2025:2880

[Third Party Advisory] https://access.redhat.com/security/cve/CVE-2025-26600

[Issue Tracking] https://bugzilla.redhat.com/show_bug.cgi?id=2345252

[Mailing List] https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html

[Vendor Advisory] https://security.netapp.com/advisory/ntap-20250516-0005/

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:7163

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:7165

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:7458

Scores

CVSS v3 7.8

EPSS 0.0006

EPSS Percentile 18.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-416

Status published

Affected Products (6)

tigervnc/tigervnc

x.org/x_server < 21.1.16

x.org/xwayland < 24.1.6

redhat/enterprise_linux

Timeline

Published Feb 25, 2025

Tracked Since Feb 18, 2026