The vulnerability CVE-2025-62229 exists in X.Org's Xwayland component, specifically in the handling of X11 Present extension notifications. Improper error handling can leave dangling pointers, resulting in a use-after-free condition. This can cause memory corruption or crashes, with potential for arbitrary code execution or denial of service. The issue affects Xwayland version 1.15.0. Red Hat's security advisories RHSA-2025:19432 and RHSA-2025:19433 describe the vulnerability and provide updated packages for Red Hat Enterprise Linux 8 and 9 to remediate the issue.

The vulnerability can lead to memory corruption or application crashes in Xwayland, which may allow an attacker with local privileges to execute arbitrary code or cause denial of service. The CVSS v3.1 base score is 7.3 (High), with attack vector Local, low attack complexity, low privileges required, no user interaction, unchanged scope, low confidentiality impact, high integrity and availability impact. Red Hat rates the security impact as Moderate in their advisories.

Official patches are available from Red Hat for affected versions of Red Hat Enterprise Linux 8 and 9. Users should apply the security updates described in advisories RHSA-2025:19432 and RHSA-2025:19433. The advisories provide detailed instructions and updated package versions. Applying these updates will remediate the vulnerability. No additional mitigation steps are indicated by the vendor.