Use-After-Free Vulnerability in X.Org and Xwayland Software

CVE-2025-26601

What is CVE-2025-26601?

A use-after-free flaw exists within the X.Org and Xwayland software. This vulnerability arises during the process of changing alarm settings, where change mask values are incrementally evaluated. If an error occurs during this evaluation, the function exits prematurely, failing to create the necessary new sync object. As a consequence, a scenario may occur where the alarm fires improperly, leading to potential memory access violations and unexpected behavior, which can severely compromise system stability and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References