CVE-2023-5380: Xorg-x11-server: use-after-free bug in destroywindow
A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.
Other sources
This vulnerability requires a legacy multi-screen setup with multiple protocol screens ("Zaphod"). If the pointer is warped from one screen to the root window of the other screen, the enter/leave code may retain a reference to the previous pointer window. Destroying this window leaves that reference in place, other windows may then trigger a use-after-free bug when they are destroyed.
This bug can be triggered only under very specific conditions, in particular it requires an XWarpPointer call and that the pointer never enters a client window on the other screen.
Reference: https://lists.x.org/archives/xorg-announce/2023-October/003430.html
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-5380?
CVE-2023-5380 is a use-after-free vulnerability in the xorg-x11-server that may lead to an X server crash in a specific configuration.
How does CVE-2023-5380 affect the xorg-x11-server?
CVE-2023-5380 affects the xorg-x11-server by causing a use-after-free flaw that can result in an X server crash.
What is the severity of CVE-2023-5380?
The severity of CVE-2023-5380 is medium with a CVSS score of 5.1.
How can I fix CVE-2023-5380?
To fix CVE-2023-5380, update the xorg-x11-server package to version 21.1.9 or higher.
Where can I find more information about CVE-2023-5380?
You can find more information about CVE-2023-5380 at the following references: [link1](https://access.redhat.com/security/cve/CVE-2023-5380), [link2](https://bugzilla.redhat.com/show_bug.cgi?id=2244736), [link3](https://lists.x.org/archives/xorg-announce/2023-October/003430.html).