Xorg-x11-server: use-after-free bug in damagedestroy

CVE-2023-5574

Summary

A use-after-free vulnerability has been identified in the xorg-x11-server-Xvfb component, which is particularly prone in legacy configurations involving multi-screen setups, commonly referred to as Zaphod mode. This issue arises when a pointer is moved from one screen to another (from screen 1 to screen 0) during the shutdown or reset of the Xvfb server, potentially leading to privilege escalation or a denial of service. System administrators utilizing this server configuration should take urgent measures to mitigate risks associated with this flaw.

References