CVE-2025-62230 is a use-after-free vulnerability in the X.Org Xwayland server's X Keyboard (Xkb) extension. It arises from improper handling of client resource cleanup, where data structures are freed without detaching associated resources. This can cause memory corruption or crashes when clients disconnect. The vulnerability has a CVSS score of 7.3 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H), indicating it requires local access with low complexity and privileges, no user interaction, and impacts confidentiality and availability. Red Hat has released official patches for multiple architectures and versions of Red Hat Enterprise Linux, addressing this issue in their xorg-x11-server-Xwayland packages.

The vulnerability can lead to memory corruption or crashes in the Xwayland server when affected clients disconnect, potentially impacting system stability and confidentiality of information processed by the X server. The CVSS score of 7.3 reflects a high severity with high impact on confidentiality and availability, and low impact on integrity. There are no known exploits in the wild at this time. The issue affects Red Hat Enterprise Linux versions 8 and 9 across multiple architectures.

Official patches are available from Red Hat for affected versions of Red Hat Enterprise Linux 8 and 9. Users should apply the updated xorg-x11-server-Xwayland packages as detailed in Red Hat advisories RHSA-2025:19432 and RHSA-2025:19433. Before applying these updates, ensure all previously released relevant errata are applied. No additional mitigation actions are specified by the vendor beyond applying the official updates.