Skip to main content

Severity by source

Vendor (redhat) PRIMARY
7.3 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
SUSE
HIGH
qualitative
Red Hat
7.3 MEDIUM
qualitative

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
High

Lifecycle Timeline

1
Analysis Generated
Apr 20, 2026 - 14:33 vuln.today

DescriptionCVE.org

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

AnalysisAI

Local privilege escalation in X.Org X server's Xkb extension affects RHEL-family distributions, allowing authenticated users to corrupt memory or crash the X server via integer overflow in XkbSetCompatMap(). Attack requires local access with low-privilege credentials. EPSS data not available; no CISA KEV listing indicates targeted rather than widespread exploitation. Red Hat has released patches across multiple RHEL versions (RHSA-2025:19432 through RHSA-2025:22055).

Technical ContextAI

The vulnerability exists in the X Keyboard (Xkb) extension of the X.Org X server, a fundamental component of graphical Linux/Unix systems that manages keyboard mapping and input handling. The XkbSetCompatMap() function performs insufficient bounds checking on input data before arithmetic operations, triggering CWE-190 (Integer Overflow or Wraparound). When processing specially crafted compatibility map data, an unsigned short variable can overflow during value calculation, resulting in an out-of-bounds write condition. The Xkb extension runs with elevated privileges in the X server process, making memory corruption exploitable for privilege escalation. This affects the core xorg-x11-server package across Red Hat Enterprise Linux variants, including standard RHEL, extended lifecycle releases, and specialized distributions like RHEL for Real Time and SAP Solutions.

RemediationAI

Apply vendor-released patches immediately for affected Red Hat Enterprise Linux systems via the appropriate RHSA advisory for your specific RHEL version and variant. Use yum or dnf package managers to update xorg-x11-server and related packages: 'sudo dnf update xorg-x11-server xorg-x11-server-common xorg-x11-server-Xwayland' (exact package names vary by advisory). Verify installed versions match patched releases specified in your applicable RHSA. For systems unable to patch immediately, implement compensating controls with understanding of operational impact: (1) Disable the Xkb extension by adding 'Option "XkbDisable" "true"' to X server configuration in /etc/X11/xorg.conf (WARNING: breaks keyboard functionality for most desktop environments; only viable for systems using alternative input methods or Wayland); (2) Restrict local user access to systems running X server through stricter authentication policies and account monitoring; (3) Deploy SELinux in enforcing mode to limit X server process privileges (already default on RHEL but verify with 'getenforce'); (4) Consider migrating to Wayland display server where applications support it, as Wayland architecture provides better privilege separation. For non-Red Hat distributions, consult your vendor's security advisories for X.Org X server updates. Headless servers without X.Org installed require no action.

More in Aix

View all
CVE-2014-3566 LOW POC
3.4 Oct 15

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak

CVE-2013-4011 HIGH POC
7.2 Jul 18

Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a

CVE-2023-28528 HIGH POC
7.8 Apr 28

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c

CVE-2016-3053 HIGH POC
7.8 Feb 01

IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile

CVE-2016-6079 HIGH POC
7.8 Feb 15

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob

CVE-2016-8972 HIGH POC
7.8 Feb 15

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the

CVE-2014-8904 HIGH POC
7.2 Jan 15

lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM

CVE-2012-2179 MEDIUM POC
6.9 Jun 22

libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar

CVE-2014-3977 MEDIUM POC
6.9 Jun 08

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on

CVE-2026-18835 CRITICAL
9.9 Aug 20

OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru

CVE-2026-16816 CRITICAL
9.9 Aug 19

OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar

CVE-2026-15068 CRITICAL
9.9 Aug 19

OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands

Vendor StatusVendor

SUSE

Severity: High
Product Status
Container suse/sl-micro/6.0/baremetal-os-container:latest Container suse/sl-micro/6.0/kvm-os-container:latest Container suse/sl-micro/6.0/rt-os-container:latest Affected
Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.0/toolbox:latest Affected
Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.6 Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.33 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.18 Affected
Container suse/sl-micro/6.1/base-os-container:2.2.1-5.30 Affected
Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd Affected

Share

CVE-2025-62231 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy