A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.
CVE-2023-5380
CVSS base score
4.7 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-416
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
x.org x server
x.org xwayland
redhat enterprise linux
fedoraproject fedora
debian debian linux
References
- access.redhat.com Third Party Advisory
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking
- lists.x.org Patch, Vendor Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com