A flaw was found in libXtst. An out-of-bounds read vulnerability in the RECORD extension reply parser allows a malicious X server to cause a Denial of Service (DoS) by crashing connected client applications. Under certain conditions, this flaw may also result in limited information disclosure.
Last checked: 2026-09-30 15:05 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 12:58 UTC)
Fix evidence last checked: 2026-10-21 06:50 UTC
SUSE Linux Enterprise Server 12 SP5
SUSE-SU-2026:4565 · Published 2026-10-07
SUSE Linux Enterprise Server 15 SP5
SUSE-SU-2026:4566 · Published 2026-10-07
SUSE Linux Enterprise Server 15 SP6
SUSE-SU-2026:4566 · Published 2026-10-07
SUSE Linux Enterprise Server 15 SP7
SUSE-SU-2026:4566 · Published 2026-10-07
SUSE Linux Enterprise Server 16
SUSE-SU-2026:24145 · Published 2026-10-06
Ubuntu 22.04 LTS (Jammy Jellyfish)
USN-8939-1 · Published 2026-10-19
Ubuntu 24.04 LTS (Noble Numbat)
USN-8939-1 · Published 2026-10-19
Ubuntu 26.04 LTS (Resolute Raccoon)
USN-8939-1 · Published 2026-10-19
Ubuntu 26.10 (Stonking Stingray)
USN-8939-1 · Published 2026-10-19