Red Hat Security Advisory: xorg-x11-server-Xwayland security update
Multiple security vulnerabilities have been identified in the xorg-x11-server component of Red Hat Enterprise Linux 9, including heap buffer overread/data leakage and use-after-free issues. These vulnerabilities affect the X.Org server, which provides core graphical interface functionality. The issues have been rated with moderate severity by Red Hat Product Security. A security update addressing these vulnerabilities is available and should be applied to affected systems.
AI Analysis
Technical Summary
TigerVNC, a suite of VNC servers and clients used in Red Hat Enterprise Linux 9, includes the xorg-x11-server component which was found vulnerable to three security issues: heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) and ProcXIPassiveGrabDevice (CVE-2024-31081), and a use-after-free in ProcRenderAddGlyphs (CVE-2024-31083). These vulnerabilities could potentially lead to data leakage or memory corruption. Red Hat has released security updates for xorg-x11-server to fix these vulnerabilities across multiple architectures and Extended Update Support versions of RHEL 9.
Potential Impact
The identified vulnerabilities could allow an attacker to cause heap buffer overreads leading to data leakage or trigger use-after-free conditions causing memory corruption. This could impact the confidentiality and stability of systems running vulnerable versions of xorg-x11-server within TigerVNC on Red Hat Enterprise Linux 9. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
A security update fixing these vulnerabilities is available from Red Hat. Users should apply the provided patches as detailed in the Red Hat advisories RHSA-2024:9122 and RHSA-2024:2036. The vendor has rated the impact as Moderate to Important and recommends updating to the fixed versions. Refer to https://access.redhat.com/articles/11258 for update instructions. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: xorg-x11-server-Xwayland security update
Description
Multiple security vulnerabilities have been identified in the xorg-x11-server component of Red Hat Enterprise Linux 9, including heap buffer overread/data leakage and use-after-free issues. These vulnerabilities affect the X.Org server, which provides core graphical interface functionality. The issues have been rated with moderate severity by Red Hat Product Security. A security update addressing these vulnerabilities is available and should be applied to affected systems.
Affected software
pkg:rpm/redhat/xorg-x11-serverRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
TigerVNC, a suite of VNC servers and clients used in Red Hat Enterprise Linux 9, includes the xorg-x11-server component which was found vulnerable to three security issues: heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) and ProcXIPassiveGrabDevice (CVE-2024-31081), and a use-after-free in ProcRenderAddGlyphs (CVE-2024-31083). These vulnerabilities could potentially lead to data leakage or memory corruption. Red Hat has released security updates for xorg-x11-server to fix these vulnerabilities across multiple architectures and Extended Update Support versions of RHEL 9.
Potential Impact
The identified vulnerabilities could allow an attacker to cause heap buffer overreads leading to data leakage or trigger use-after-free conditions causing memory corruption. This could impact the confidentiality and stability of systems running vulnerable versions of xorg-x11-server within TigerVNC on Red Hat Enterprise Linux 9. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
A security update fixing these vulnerabilities is available from Red Hat. Users should apply the provided patches as detailed in the Red Hat advisories RHSA-2024:9122 and RHSA-2024:2036. The vendor has rated the impact as Moderate to Important and recommends updating to the fixed versions. Refer to https://access.redhat.com/articles/11258 for update instructions. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:9122
- Cve Count
- 3
- Additional Cves
- ["CVE-2024-31081","CVE-2024-31083"]
Threat ID: 6a3da1ec4853345fc1830932
Added to database: 06/25/2026, 21:47:24 UTC
Last enriched: 08/06/2026, 23:22:57 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 45
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.