The Red Hat Security Advisory RHSA-2025:19623 addresses three vulnerabilities in the xorg-x11-server-Xwayland package affecting Red Hat Enterprise Linux 9 and related variants. The issues include use-after-free bugs in XPresentNotify structure creation (CVE-2025-62229) and Xkb client resource removal (CVE-2025-62230), as well as a value overflow in XkbSetCompatMap() (CVE-2025-62231). These vulnerabilities could potentially lead to memory corruption. Red Hat has released updated xorg-x11-server-Xwayland packages to remediate these issues. The advisory covers multiple architectures and extended update support versions of RHEL 9. No CVSS score is provided, and no exploits are known in the wild at this time.

The vulnerabilities involve use-after-free and value overflow conditions in the Xwayland server component, which could lead to memory corruption. This may affect system stability or security depending on exploitation, but no known exploits have been reported. The severity is rated moderate by Red Hat.

Red Hat has released updated xorg-x11-server-Xwayland packages that fix these vulnerabilities. Users should apply the updates as per Red Hat's guidance after ensuring all previously released errata relevant to their system have been applied. Refer to Red Hat advisory RHSA-2025:19623 and the update instructions at https://access.redhat.com/articles/11258 for detailed remediation steps.