CVEvulnerability
CVE-2025-62230
7.3 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-10-30
- Last modified
- 2026-07-01
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
- Weaknesses
- CWE-416
Description
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.
Affected configurations
• x.org x server (< 21.1.19)
• x.org xwayland (< 24.1.9)
• ibm vios (>= 4.1.0 < 4.1.1.30)
• ibm vios 4.1.2.0
• ibm aix (>= 7.2.5 < 7.2.5.12)
• ibm aix (>= 7.3.2 < 7.3.3.3)
• ibm aix 7.3.4
• debian debian linux 11.0
• redhat enterprise linux 8.0
• redhat enterprise linux 9.0
• redhat enterprise linux 10.0
• redhat enterprise linux aus 8.2
• redhat enterprise linux aus 8.4
• redhat enterprise linux aus 8.6
• redhat enterprise linux els 6.0
• redhat enterprise linux els 7.0
• redhat enterprise linux eus 8.4
• redhat enterprise linux eus 9.4
• redhat enterprise linux tus 8.6
• redhat enterprise linux tus 8.8
• redhat enterprise linux update services for sap solutions 8.6
• redhat enterprise linux update services for sap solutions 8.8
• redhat enterprise linux update services for sap solutions 9.0
• redhat enterprise linux update services for sap solutions 9.2
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://access.redhat.com/errata/RHSA-2025:19432 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19433 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19434 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19435 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19489 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19623 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19909 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:20958 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:20960 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:20961 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:21035 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22040 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22041 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22051 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22055 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22056 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22077 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22096 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22164 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22167 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22364 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22365 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22426 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22427 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22667 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22729 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22742 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22753 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0031 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0033 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0034 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0035 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0036 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-62230 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2402653 Issue Tracking, Third Party Advisory
- https://lists.x.org/archives/xorg-announce/2025-October/003635.html Mailing List, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/10/28/7 Mailing List, Patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html Mailing List, Third Party Advisory