CVE catalog

CVE-2024-0408

xwayland: CVE-2024-0408

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.32% · Oct 25, 2026

A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxwaylandsid2:24.1.14-1fixed
Debianxwaylandforky2:24.1.14-1fixed
Debianxwaylandtrixie2:24.1.6-1fixed
Debianxwaylandbookworm2:22.1.9-1vulnerable
Debianxorg-serversid2:21.1.25-2fixed
Debianxorg-serverforky2:21.1.25-2fixed
Debianxorg-servertrixie2:21.1.16-1.3+deb13u3fixed
Debianxorg-servertrixie-security2:21.1.16-1.3+deb13u4fixed
Debianxorg-serverbookworm2:21.1.7-3+deb12u12fixed
Debianxorg-serverbookworm-security2:21.1.7-3+deb12u13fixed
Ubuntuxorg-serverpro2:1.19.5-0ubuntu2vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu1vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu2vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu3vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.1vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.2vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.3vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.4vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.5vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.6vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.7vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.8vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.9vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.10vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.11vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.12vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.13vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.14vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm1vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm3vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm4fixed
Ubuntuxorg-server-hwe-16.04pro2:1.18.4-1ubuntu6.1~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.18.4-1ubuntu6.1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.5-0ubuntu2~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.5vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm5vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm6vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm7vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm8vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm9vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm10vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.1-3ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.4-1ubuntu3~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.5+git20191008-0ubuntu1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.2vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.3vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.4vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.5vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.6vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.7vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.8vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.9vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.10vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm2vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm3vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm4vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm5vulnerable
Ubuntuxorg-server20.042:1.20.5+git20191008-0ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.6-1ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.7-2ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.7-2ubuntu2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.1vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.3vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.4vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.6vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.1~20.04.1vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.2~20.04.1vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.2~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.11-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.3vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.4vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.5vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.6vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.8vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.9vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.12vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.14fixed
Ubuntuxorg-server22.042:1.20.13-1ubuntu1vulnerable
Ubuntuxorg-server22.042:1.20.13-1ubuntu2vulnerable
Ubuntuxorg-server22.042:1.20.14-1ubuntu1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.3vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.4vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.5vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.6vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.7vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.8vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.9vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.1vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.2vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.5vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.7fixed
Ubuntuxwayland22.042:21.1.2-0ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.3-1vulnerable
Ubuntuxwayland22.042:21.1.3-1ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.4-1vulnerable
Ubuntuxwayland22.042:22.1.0-1vulnerable
Ubuntuxwayland22.042:22.1.1-1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.2vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.3vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.4vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.5vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.6vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.7vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.9vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.10fixed
Ubuntuxwayland24.042:23.2.0-1vulnerable
Ubuntuxwayland24.042:23.2.0-1ubuntu0.1vulnerable
Ubuntuxwayland24.042:23.2.3-1vulnerable
Ubuntuxwayland24.042:23.2.4-1fixed
Susexorg-x11-serverlinux enterprise module for basesystem 15 sp521.1.4-150500.7.21.1fixed
Susexorg-x11-serverlinux enterprise module for development tools 15 sp521.1.4-150500.7.21.1fixed
Opensusexorg-x11-serverleap 15.521.1.4-150500.7.21.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp4-espos1.20.3-150400.38.43.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp4-ltss1.20.3-150400.38.43.1fixed
Susexorg-x11-serverlinux enterprise server 15 sp4-ltss1.20.3-150400.38.43.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 15 sp41.20.3-150400.38.43.1fixed
Susexorg-x11-servermanager proxy 4.31.20.3-150400.38.43.1fixed
Susexorg-x11-servermanager server 4.31.20.3-150400.38.43.1fixed
Susexwaylandlinux enterprise workstation extension 15 sp522.1.5-150500.7.17.1fixed
Opensusexwaylandleap 15.522.1.5-150500.7.17.1fixed
Susexorg-x11-serverlinux enterprise software development kit 12 sp51.19.6-10.68.1fixed
Susexorg-x11-serverlinux enterprise server 12 sp51.19.6-10.68.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 12 sp51.19.6-10.68.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp2-ltss1.20.3-150200.22.5.91.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp3-ltss1.20.3-150200.22.5.91.1fixed
Susexorg-x11-serverlinux enterprise server 15 sp2-ltss1.20.3-150200.22.5.91.1fixed
Susexorg-x11-serverlinux enterprise server 15 sp3-ltss1.20.3-150200.22.5.91.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 15 sp21.20.3-150200.22.5.91.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 15 sp31.20.3-150200.22.5.91.1fixed
Susexorg-x11-serverlinux enterprise workstation extension 15 sp51.20.3-150200.22.5.91.1fixed
Susexorg-x11-serverenterprise storage 7.11.20.3-150200.22.5.91.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxwaylandsourcesid2:23.2.4-1not yet assignedNot reportedNot reported
Debianxwaylandsourceforky2:23.2.4-1not yet assignedNot reportedNot reported
Debianxwaylandsourcetrixie2:23.2.4-1not yet assignedNot reportedNot reported
Debianxwaylandsourcebookworm(unfixed)not yet assignedNot reportedNot reported
Debianxorg-serversourcesid2:21.1.11-1not yet assignedNot reportedNot reported
Debianxorg-serversourceforky2:21.1.11-1not yet assignedNot reportedNot reported
Debianxorg-serversourcetrixie2:21.1.11-1not yet assignedNot reportedNot reported
Debianxorg-serversourcebookworm2:21.1.7-3+deb12u5not yet assignedNot reportedNot reported
Ubuntuxorg-serverdebpro2:1.19.6-1ubuntu4.15+esm4Not reportedUBUNTU-CVE-2024-0408Not reported
Ubuntuxorg-serverdeb20.042:1.20.13-1ubuntu1~20.04.14Not reportedUBUNTU-CVE-2024-0408Not reported
Ubuntuxorg-serverdeb22.042:21.1.4-2ubuntu1.7~22.04.7Not reportedUBUNTU-CVE-2024-0408Not reported
Ubuntuxwaylanddeb22.042:22.1.1-1ubuntu0.10Not reportedUBUNTU-CVE-2024-0408Not reported
Ubuntuxwaylanddeb24.042:23.2.4-1Not reportedUBUNTU-CVE-2024-0408Not reported
Susexorg-x11-serverrpmlinux enterprise module for basesystem 15 sp521.1.4-150500.7.21.1Not reportedSUSE-SU-2024:0249-1Not reported
Susexorg-x11-serverrpmlinux enterprise module for development tools 15 sp521.1.4-150500.7.21.1Not reportedSUSE-SU-2024:0249-1Not reported
Opensusexorg-x11-serverrpmleap 15.521.1.4-150500.7.21.1Not reportedSUSE-SU-2024:0249-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp4-espos1.20.3-150400.38.43.1Not reportedSUSE-SU-2024:0252-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp4-ltss1.20.3-150400.38.43.1Not reportedSUSE-SU-2024:0252-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 15 sp4-ltss1.20.3-150400.38.43.1Not reportedSUSE-SU-2024:0252-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 15 sp41.20.3-150400.38.43.1Not reportedSUSE-SU-2024:0252-1Not reported
Susexorg-x11-serverrpmmanager proxy 4.31.20.3-150400.38.43.1Not reportedSUSE-SU-2024:0252-1Not reported
Susexorg-x11-serverrpmmanager server 4.31.20.3-150400.38.43.1Not reportedSUSE-SU-2024:0252-1Not reported
Susexwaylandrpmlinux enterprise workstation extension 15 sp522.1.5-150500.7.17.1Not reportedSUSE-SU-2024:0212-1Not reported
Opensusexwaylandrpmleap 15.522.1.5-150500.7.17.1Not reportedSUSE-SU-2024:0212-1Not reported
Susexorg-x11-serverrpmlinux enterprise software development kit 12 sp51.19.6-10.68.1Not reportedSUSE-SU-2024:0236-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 12 sp51.19.6-10.68.1Not reportedSUSE-SU-2024:0236-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 12 sp51.19.6-10.68.1Not reportedSUSE-SU-2024:0236-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp2-ltss1.20.3-150200.22.5.91.1Not reportedSUSE-SU-2024:0251-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp3-ltss1.20.3-150200.22.5.91.1Not reportedSUSE-SU-2024:0251-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 15 sp2-ltss1.20.3-150200.22.5.91.1Not reportedSUSE-SU-2024:0251-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 15 sp3-ltss1.20.3-150200.22.5.91.1Not reportedSUSE-SU-2024:0251-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 15 sp21.20.3-150200.22.5.91.1Not reportedSUSE-SU-2024:0251-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 15 sp31.20.3-150200.22.5.91.1Not reportedSUSE-SU-2024:0251-1Not reported
Susexorg-x11-serverrpmlinux enterprise workstation extension 15 sp51.20.3-150200.22.5.91.1Not reportedSUSE-SU-2024:0251-1Not reported
Susexorg-x11-serverrpmenterprise storage 7.11.20.3-150200.22.5.91.1Not reportedSUSE-SU-2024:0251-1Not reported

Notes

[bookworm] xwayland: Minor issue; Xwayland shouldn't be running as root

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References