This advisory addresses three vulnerabilities in the xorg-x11-server-Xwayland component of Red Hat Enterprise Linux 9. CVE-2025-62229 and CVE-2025-62230 are use-after-free vulnerabilities in XPresentNotify structure creation and Xkb client resource removal, respectively. CVE-2025-62231 is a value overflow in XkbSetCompatMap(). Red Hat has released updated packages (version 23.2.7-5.el9_6) to fix these issues across multiple architectures and product variants. The advisory does not provide a CVSS score but classifies the severity as moderate. No known exploits in the wild have been reported. The vendor recommends applying the update after ensuring all previous errata are applied.

The vulnerabilities could lead to memory corruption issues such as use-after-free and integer overflow within the Xwayland server component, potentially causing application crashes or other unintended behavior. The advisory does not specify exploitation details or direct impact beyond these technical issues. No active exploitation is known at this time.

Red Hat has provided fixed package updates for affected versions of Red Hat Enterprise Linux 9 and related variants. Users should apply these updates as per the vendor's instructions after ensuring all prior relevant errata are installed. The vendor advisory is the authoritative source for patch availability and remediation steps.