Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2025-62229— Xorg: xmayland: use-after-free in xpresentnotify structure creation

Quick assessment

Affected

X.Org Xwayland

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Red Hat Enterprise Linux是美国红帽（Red Hat）公司的面向企业用户的Linux操作系统。 Red Hat Enterprise Linux存在资源管理错误漏洞，该漏洞源于X11 Present扩展通知处理过程中错误处理不当，可能导致释放后重用，进而导致内存损坏或崩溃，可能允许攻击者执行任意代码或导致拒绝服务。

CVSS 7.3 · High EPSS 0.51% · P41 Updated Apr 20, 2026

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1203 · Exploitation for Client Execution

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-62229

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Xorg: xmayland: use-after-free in xpresentnotify structure creation

Source: CVE Program / CVE List V5

Vulnerability Description

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

释放后使用

Source: CVE Program / CVE List V5

Vulnerability Title

Red Hat Enterprise Linux 资源管理错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
X.Org	Xwayland	1.15.0 ~ 24.1.9	-
Red Hat	Red Hat Enterprise Linux 10	0:24.1.5-5.el10_0 ~ *	`cpe:/o:redhat:enterprise_linux:10.0`
Red Hat	Red Hat Enterprise Linux 10	0:24.1.5-5.el10_1 ~ *	`cpe:/o:redhat:enterprise_linux:10.1`
Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	0:1.1.0-25.el6_10.15 ~ *	`cpe:/o:redhat:rhel_els:6`
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	0:1.20.4-33.el7_9 ~ *	`cpe:/o:redhat:rhel_els:7`
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	0:1.8.0-36.el7_9.3 ~ *	`cpe:/o:redhat:rhel_els:7`
Red Hat	Red Hat Enterprise Linux 8	0:21.1.3-19.el8_10 ~ *	`cpe:/a:redhat:enterprise_linux:8::appstream`
Red Hat	Red Hat Enterprise Linux 8	0:1.20.11-27.el8_10 ~ *	`cpe:/a:redhat:enterprise_linux:8::appstream`
Red Hat	Red Hat Enterprise Linux 8	0:1.15.0-8.el8_10 ~ *	`cpe:/a:redhat:enterprise_linux:8::appstream`
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	0:1.9.0-15.el8_2.15 ~ *	`cpe:/a:redhat:rhel_aus:8.2::appstream`
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	0:1.20.6-5.el8_2 ~ *	`cpe:/a:redhat:rhel_aus:8.2::appstream`
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	0:1.11.0-8.el8_4.14 ~ *	`cpe:/a:redhat:rhel_eus_long_life:8.4::appstream`
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	0:1.20.10-3.el8_4 ~ *	`cpe:/a:redhat:rhel_eus_long_life:8.4::appstream`
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	0:1.11.0-8.el8_4.14 ~ *	`cpe:/a:redhat:rhel_eus_long_life:8.4::appstream`
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	0:1.20.10-3.el8_4 ~ *	`cpe:/a:redhat:rhel_eus_long_life:8.4::appstream`
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	0:1.12.0-6.el8_6.15 ~ *	`cpe:/a:redhat:rhel_aus:8.6::appstream`
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	0:1.20.11-6.el8_6 ~ *	`cpe:/a:redhat:rhel_aus:8.6::appstream`
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	0:21.1.3-2.el8_6.5 ~ *	`cpe:/a:redhat:rhel_aus:8.6::appstream`
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	0:1.12.0-6.el8_6.15 ~ *	`cpe:/a:redhat:rhel_aus:8.6::appstream`
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	0:1.20.11-6.el8_6 ~ *	`cpe:/a:redhat:rhel_aus:8.6::appstream`
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	0:21.1.3-2.el8_6.5 ~ *	`cpe:/a:redhat:rhel_aus:8.6::appstream`
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	0:1.12.0-6.el8_6.15 ~ *	`cpe:/a:redhat:rhel_aus:8.6::appstream`
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	0:1.20.11-6.el8_6 ~ *	`cpe:/a:redhat:rhel_aus:8.6::appstream`
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	0:21.1.3-2.el8_6.5 ~ *	`cpe:/a:redhat:rhel_aus:8.6::appstream`
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	0:1.12.0-15.el8_8.16 ~ *	`cpe:/a:redhat:rhel_e4s:8.8::appstream`
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	0:1.20.11-17.el8_8 ~ *	`cpe:/a:redhat:rhel_e4s:8.8::appstream`
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	0:21.1.3-12.el8_8 ~ *	`cpe:/a:redhat:rhel_e4s:8.8::appstream`
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	0:1.12.0-15.el8_8.16 ~ *	`cpe:/a:redhat:rhel_e4s:8.8::appstream`
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	0:1.20.11-17.el8_8 ~ *	`cpe:/a:redhat:rhel_e4s:8.8::appstream`
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	0:21.1.3-12.el8_8 ~ *	`cpe:/a:redhat:rhel_e4s:8.8::appstream`

II. Public POCs for CVE-2025-62229

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2025-62229

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-62229 (30)

🔗 CVE-2025-62229 - Red Hat Customer Portal Read full article vdb-entry x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0036 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0034 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0033 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0035 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0031 vendor-advisory x_refsource_REDHAT
RHSA-2025:20961 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22041 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22753 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22056 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22729 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22427 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2025:19434 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
RHSA-2025:20960 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22164 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22055 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22040 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22426 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22077 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2025:19432 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
🔗 RHSA-2025:19433 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
RHSA-2025:20958 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
RHSA-2025:21035 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22096 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22051 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22365 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22667 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22742 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22167 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22364 vendor-advisory x_refsource_REDHAT

Mailing List Discussions for CVE-2025-62229 (1)

🔗 X.Org Security Advisory: multiple security issues X.Org X server and Xwayland Read full article

https://www.cve.org/CVERecord?id=CVE-2025-62229

Same Patch Batch · X.Org · 2025-10-30 · 3 CVEs total

CVE-2025-62231	7.3 HIGH	Xorg: xmayland: value overflow in xkbsetcompatmap()
CVE-2025-62230	7.3 HIGH	Xorg: xwayland: use-after-free in xkb client resource removal

IV. Related Vulnerabilities

Same product: Xwayland

Same vendor: X.Org

Same weakness: CWE-416

V. Comments for CVE-2025-62229

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-62229— Xorg: xmayland: use-after-free in xpresentnotify structure creation

Quick assessment

Possible ATT&CK Techniques 2 AI

I. Basic Information for CVE-2025-62229

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2025-62229

III. Intelligence Information for CVE-2025-62229

Vendor Advisories for CVE-2025-62229 (30)

Mailing List Discussions for CVE-2025-62229 (1)

Same Patch Batch · X.Org · 2025-10-30 · 3 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2025-62229

Leave a comment