CVE-2024-0409
Xorg-x11-server: selinux context corruption
Summary
Xorg-x11-server: selinux context corruption
Original description
The description as published by the source.
A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-0409 xorg-server Fixed in: 2:1.20.11-1+deb11u11
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory security.netapp.com
- package gitlab.freedesktop.org
- report bugzilla.redhat.com
- web access.redhat.com
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org