CVE-2025-26599

7.8 HIGH
Published: February 25, 2025 Modified: November 03, 2025

Description

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2500
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2502
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2861
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2862
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2865
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2866
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2873
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2874
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2875
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2879
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2880
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-26599
Source: secalert@redhat.com
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2345253
Source: secalert@redhat.com
Issue Tracking

17 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.8 / 10.0
EPSS (Exploit Probability)
0.1%
16th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

tigervnc redhat x.org