VulnSocial

CVE-2026-50256Patch(redhat / enterprise_linux)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch redhat enterprise_linux systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias target name length is 1024 bytes. A font alias name between 257 and 1023 bytes causes the X server to copy that name into the undersized stack buffer without further checks. This may be used to crash the server, or for privilege escalation if the X server runs as root.

redhat CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • enterprise_linux
  • x_server
  • xwayland

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-06-05); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
redhatx.org
Products
enterprise_linuxx_serverxwayland

4 versions affected across 3 products

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-05: 1Mentions · 2026-06-06: 1Mentions · 2026-06-27: 1Patch / Workaround · 2026-06-06: 1Patch / Workaround · 2026-06-27: 1Technical Details · 2026-06-27: 106-0506-0606-27
Signal classification2 categories
Patch
266.7%
General
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-051
General1
2026-06-061
Patch1
2026-06-271
Patch1
Full discourse3 posts
  • XLibre@XLibreDev
    Patch

    We released the #XLibre Xserver 25.0.0.24 and 25.1.6 on Jun 05 containing #security fixes for #CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, and CVE-2026-50263. https://github.com/X11Libre/xserver/releases/tag/xlibre-xserver-25.0.0.24 https://github.com/X11Libre/xserver/releases/tag/xlibre-xserver-25.1.6

    Post summary

    The notice announces the release of updated XLibre Xserver versions that integrate security patches for a group of CVE-2026-50256 through 2026-50263.

    820215844.8K
    5.3K followersView on X
  • Ferramentas Linux@Cezar_H_Linux
    Patch

    DSA-6370-1: 9 CVEs críticos no xorg-server (CVE-2026-50256 a -50264) permitem escalonamento de privilégio em X11. Atualize para 2:21.1.16-1.3+deb13u3 no Debian trixie. Reinicie o servidor X após o patch. Saiba mais: -> http://tinyurl.com/5f8mytj2 #Debian https://t.co/6b34rUi68p

    Post summary

    A Debian Security Advisory (DSA-6370-1) lists nine critical CVEs in xorg-server that enable privilege escalation; users are advised to update to version 2:21.1.16-1.3+deb13u3 and restart the X server.

    10000144
    1.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-50256 Re https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-50256

    Post summary

    The message only references CVE‑2026‑50256 and provides a link to Vulmon, offering no further details about the vulnerability.

    0000083
    4.0K followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
OSredhatenterprise_linux10.0--
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--
OSredhatenterprise_linux9.0--
Appx.orgx_server---
Appx.orgxwayland---

Explore more

Back to dashboardredhat CVEsx.org CVEsenterprise_linux vulnerabilities