X.Org and Xwayland Use-After-Free Vulnerability in Root Cursor

A use-after-free vulnerability has been identified in X.Org and Xwayland. The issue arises because the root cursor is treated as a global variable in the X server. If a client frees the root cursor, the server's reference to it becomes a dangling pointer, leading to a use-after-free condition.

Impact

Exploitation of this vulnerability causes a use-after-free condition, where the X server references freed memory. This can lead to memory corruption, crashes, or potentially allow for the execution of arbitrary code, depending on how the freed memory is manipulated.

Remediation

Users can apply the available updates for their specific Red Hat Enterprise Linux version. Details on how to apply these updates can be found in the Red Hat Product Errata for each affected version.