X.Org X Server and Xwayland X Keyboard Extension Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the X.Org X server's X Keyboard (Xkb) extension, specifically in the client resource cleanup process. When a client's Xkb resources are removed, the associated data is freed prematurely while still being referenced. This flaw can lead to memory corruption or crashes when the affected clients disconnect. The vulnerability is present in the X.Org X server and Xwayland components.

Impact

Exploitation of this vulnerability can cause memory corruption or crashes, as the cleanup process attempts to access already freed memory. Additionally, according to Red Hat, there is potential for executing arbitrary code under certain conditions.