VDB

MAGEIA-2023-131

MAGEIA-2023-131 PUBLISHED

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later. (CVE-2023-1393)

Affected Products

VendorProductVersions
Mageiax11-server1.20.14-4.3.mga8, 0, 1.20.14-4.3.mga8
Mageiamesa0, 23.1.9-1.mga9, 0
Mageiatigervnc1.11.0-4.3.mga8, 0, 0

Timeline

  • Apr 11, 2023 CVE Updated
  • Apr 11, 2023 CVE Published
  • Mar 17, 2026 Distribution Patch
  • Mar 17, 2026 Distribution Patch
  • Mar 17, 2026 Distribution Patch
  • Mar 17, 2026 Security Advisory
  • Mar 17, 2026 Security Advisory
  • Mar 17, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›