CVE-2026-93516

A flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition—where the software attempts to access memory after it has been freed—by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the dangling device pointer. This flaw can lead to arbitrary code execution or a Denial of Service (DoS) via an X server crash.

Red Hat rates this vulnerability as Important because an authenticated local user with access to an active X server session can trigger memory corruption, potentially leading to local privilege escalation or a denial of service. The flaw resides in how the X.Org server processes input device removal alongside passive grabs, leaving unmanaged device references that are dereferenced during subsequent pointer event handling. While default desktop configurations on modern Red Hat Enterprise Linux releases utilize Wayland sessions, environments running standalone Xorg server instances remain exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.