VulnSocial

CVE-2025-26597Disclosure(redhat / enterprise_linux)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.

redhat CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-119

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • enterprise_linux
  • tigervnc
  • x_server
  • xwayland

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
redhattigervncx.org
Products
enterprise_linuxtigervncx_serverxwayland

4 versions affected across 4 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-08: 1Technical Details · 2026-06-08: 106-08
Signal classification1 categories
Disclosure
1100.0%
Referenced assets2 URLs
By indicator
Full discourse1 post
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    CVE-2026-50258 - Stack buffer overflow in http://X.org X server and Xwayland. Incomplete fix for CVE-2025-26597 allows crash or privilege escalation via excessive shift levels. CVSS 7.8. No patch available. Mitigate NOW!. #CVE #Xorg #infosec https://www.valtersit.com/cve/CVE-2026-50258

    Post summary

    The post announces CVE‑2026‑50258, a stack buffer overflow in X.org X server/Xwayland that can lead to crashes or privilege escalation, notes that no patch exists, and urges users to mitigate immediately.

    0000079
    921 followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--
OSredhatenterprise_linux9.0--
Apptigervnctigervnc---
Appx.orgx_server---
Appx.orgxwayland---

Explore more

Back to dashboardredhat CVEstigervnc CVEsx.org CVEsenterprise_linux vulnerabilities