Use-After-Free Flaw in X.Org and Xwayland Affects Global Cursor Handling

CVE-2025-26594

What is CVE-2025-26594?

A use-after-free vulnerability exists in X.Org and Xwayland due to improper management of the root cursor as a global variable. When a client improperly frees the root cursor, it leads to references pointing to deallocated memory. This inconsistency could be exploited, potentially leading to unexpected behavior or security breaches. It is critical for users and administrators to audit their systems for this vulnerability to mitigate possible risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References