What is the CVSS score of CVE-2025-62230?

CVE-2025-62230 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H. EPSS exploitation probability: 0.0%.

Which versions of X Server are affected by CVE-2025-62230?

CVE-2025-62230 is a use-after-free vulnerability in X.Org X server's Xkb extension affecting Red Hat Enterprise Linux systems, allowing authenticated local users to crash services or read sensitive…. A patch is available.

How to fix or mitigate CVE-2025-62230?

Within 24 hours: Identify all RHEL systems running X.Org X server (typically desktop/workstation deployments) using your asset inventory and disable X11 forwarding on SSH where not operationally required. Within 7 days: Contact Red Hat for patched kernel or X.Org packages corresponding to your RHEL version and test in non-production; cross-reference RHSA-2025:19432 through RHSA-2025:22055 for your specific RHEL release. Within 30 days: Deploy patched X.Org X server packages to all affected systems via your patch management process and verify via package version confirmation.

X Server CVE-2025-62230

HIGH

Use After Free (CWE-416)

2025-10-30 secalert@redhat.com

Memory Corruption Use After Free Buffer Overflow X Server Xwayland Vios Aix Debian Linux Enterprise Linux Enterprise Linux Aus Enterprise Linux Els Enterprise Linux Eus Enterprise Linux Tus Enterprise Linux Update Services For Sap Solutions

7.3

CVSS 3.1 · Vendor: redhat

Severity by source

Vendor (redhat) PRIMARY

7.3 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

SUSE

HIGH

qualitative

Red Hat

7.3 MEDIUM

qualitative

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 20, 2026 - 14:34 vuln.today

DescriptionCVE.org

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.

AnalysisAI

Use-after-free memory corruption in X.Org X server's Xkb extension allows local authenticated attackers to achieve high confidentiality impact, low integrity impact, and high availability impact (CVSS 7.3) through improper resource cleanup during client disconnection. The vulnerability affects Red Hat Enterprise Linux distributions with multiple security advisories released (RHSA-2025:19432 through RHSA-2025:22055). EPSS data not provided, but the local attack vector (AV:L) and low complexity (AC:L) indicate exploitation requires authenticated local access. No CISA KEV listing or public POC identified at time of analysis.

Technical ContextAI

The X.Org X server implements the X Keyboard (Xkb) extension to manage keyboard mappings, layouts, and input device configuration in X11 windowing systems. This vulnerability (CWE-416: Use After Free) occurs in the resource cleanup path when X11 clients disconnect from the server. The software incorrectly frees memory structures containing Xkb-related data without properly detaching or nullifying pointers held by related resources. When subsequent code attempts to access these freed memory regions-either through lingering references or during final cleanup operations-it triggers a use-after-free condition. The tagged presence of both 'Buffer Overflow' and 'Memory Corruption' alongside 'Use After Free' suggests the freed memory may be reallocated for different purposes, allowing controlled memory corruption through heap manipulation techniques common in use-after-free exploitation. The X server typically runs with elevated privileges on Linux systems, making memory corruption vulnerabilities in this component particularly security-sensitive despite the local attack vector.

RemediationAI

Apply vendor-released patches immediately through standard Red Hat update mechanisms using 'yum update xorg-x11-server' or 'dnf update xorg-x11-server' commands appropriate to your RHEL version. Consult the specific Red Hat Security Advisory corresponding to your distribution version from the 15 published advisories (RHSA-2025:19432 through RHSA-2025:22055 available at access.redhat.com/errata) to identify exact fixed package versions. Patched versions are vendor-confirmed available across all affected RHEL releases based on advisory publication. For systems where immediate patching is not feasible, implement compensating controls by restricting local user access to trusted administrators only, disabling remote login capabilities that could provide local shell access to untrusted users, and monitoring X server process crashes through system logging and alerting mechanisms. Consider migrating to Wayland display server protocol where application compatibility permits, as Wayland's architecture eliminates this legacy X11 code path entirely, though this represents a significant configuration change with potential compatibility trade-offs for legacy X11-only applications. No effective workaround exists to disable Xkb extension functionality without breaking keyboard input, making patching the only viable complete remediation.

More in X Server

View all

CVE-2018-14665 MEDIUM This Month POC

6.6 Oct 25

A flaw was found in xorg-x11-server before 1.20.3. Rated medium severity (CVSS 6.6), this vulnerability is low attack co

CVE-2019-17624 HIGH This Week POC

7.8 Oct 16

"" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. Rated high severity (C

CVE-2017-10971 HIGH This Week

8.8 Jul 06

In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context

CVE-2026-56000 CRITICAL Act Now

9.0 Jul 08

Use-after-free in the GLX dispatch layer of X.Org X Server and Xwayland allows an authenticated X client to corrupt heap

CVE-2022-46344 HIGH This Week

8.8 Dec 14