This advisory covers three security flaws in the xorg-x11-server component of Red Hat Enterprise Linux 8. CVE-2024-31080 and CVE-2024-31081 are heap buffer overread vulnerabilities that could lead to data leakage in the ProcXIGetSelectedEvents and ProcXIPassiveGrabDevice functions, respectively. CVE-2024-31083 is a use-after-free vulnerability in the ProcRenderAddGlyphs function. These issues could potentially expose sensitive information or cause instability in the X.Org server. Red Hat has released updated packages to address these vulnerabilities, and the update is classified with a moderate severity impact. No CVSS scores are provided in the advisory, and no known exploits in the wild have been reported.

The vulnerabilities could allow an attacker to cause data leakage through heap buffer overreads or trigger use-after-free conditions, potentially leading to information disclosure or application instability within the X.Org server environment. The impact is rated as moderate by Red Hat, indicating a security risk that should be addressed but is not considered critical or high severity. No active exploitation has been reported.

Red Hat has released updated xorg-x11-server packages for Red Hat Enterprise Linux 8 on multiple architectures to fix these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2024:3258 and the referenced update article (https://access.redhat.com/articles/11258). Since this is an official fix, applying the update is the recommended remediation. No additional mitigation steps are indicated by the vendor.