CVE-2025-62230

Published: Oct 30, 2025Modified: Jul 1, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Exploitability: 1.8 / Impact: 5.5

Source: secalert@redhat.com (Secondary)

Description

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.

Affected (24)

Products: X.org: X Server, Xwayland · Ibm: Aix, Vios · Debian: Debian Linux · +1 more

Show all products

X.org: X Server, Xwayland · Ibm: Aix, Vios · Debian: Debian Linux · Redhat: Enterprise Linux, Enterprise Linux Aus, Enterprise Linux Els, Enterprise Linux Eus, Enterprise Linux Tus, Enterprise Linux Update Services For Sap Solutions

2 products

2 products

1 product

6 products

Enterprise Linux

Enterprise Linux Aus

Enterprise Linux Els

Enterprise Linux Eus

Enterprise Linux Tus

Enterprise Linux Update Services For Sap Solutions

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
X.org X Server	Before 21.1.19
X.org Xwayland	Before 24.1.9

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	From 7.2.5 to 7.2.5.12
Ibm Aix	From 7.3.2 to 7.3.3.3
Ibm Aix	Version 7.3.4
Ibm Vios	From 4.1.0 to 4.1.1.30
Ibm Vios	Version 4.1.2.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 11.0

Configuration D

16 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 10.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Enterprise Linux Aus	Version 8.2
Redhat Enterprise Linux Aus	Version 8.4
Redhat Enterprise Linux Aus	Version 8.6
Redhat Enterprise Linux Els	Version 6.0
Redhat Enterprise Linux Els	Version 7.0
Redhat Enterprise Linux Eus	Version 8.4
Redhat Enterprise Linux Eus	Version 9.4
Redhat Enterprise Linux Tus	Version 8.6
Redhat Enterprise Linux Tus	Version 8.8
Redhat Enterprise Linux Update Services For Sap Solutions	Version 8.6
Redhat Enterprise Linux Update Services For Sap Solutions	Version 8.8
Redhat Enterprise Linux Update Services For Sap Solutions	Version 9.0
Redhat Enterprise Linux Update Services For Sap Solutions	Version 9.2

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (38)

https://access.redhat.com/errata/RHSA-2025:19432

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19433

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19434

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19435

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19489

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19623

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19909

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:20958

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:20960

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:20961

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:21035

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22040

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22041

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22051

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22055

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22056

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22077

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22096

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22164

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22167

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22364

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22365

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22426

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22427

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22667

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22729

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22742

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22753

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0031

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0033

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0034

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0035

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0036

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/security/cve/CVE-2025-62230

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2402653

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://lists.x.org/archives/xorg-announce/2025-October/003635.html

Source: secalert@redhat.com

Mailing ListVendor Advisory

http://www.openwall.com/lists/oss-security/2025/10/28/7

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.