CVE detail
CVE-2025-26600
A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 13.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
19 source links · newest first
- https://security.netapp.com/advisory/ntap-20250516-0005/security.netapp.com
No excerpt available.
Vendor Advisorysecurity.netapp.comFeb 25, 2025, 4:15 PM No excerpt available.
Vendor Advisorylists.debian.orgFeb 25, 2025, 4:15 PM- https://bugzilla.redhat.com/show_bug.cgi?id=2345252bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/security/cve/CVE-2025-26600access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:7458access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:7165access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:7163access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:3976access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2880access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2879access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2875access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2874access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2873access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2866access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2865access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2862access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2861access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2502access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2500access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-26601CVSS 7.8 · High
A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requ…
- CVE-2025-26594CVSS 7.8 · High
A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal referenc…
- CVE-2026-50263CVSS 5.5 · Medium
A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing…
- CVE-2026-50261CVSS 7.8 · High
A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying…
- CVE-2026-50260CVSS 7.8 · High
A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-aft…
- CVE-2026-50257CVSS 7.8 · High
A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function poi…