# CVE-2024-0408: xnest: A flaw was found in the X.Org server

CVE-2024-0408 is fixed in 29 products on 1 platform, first by xdmx 2:1.19.6-1ubuntu4.15+esm4, released January 15, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2024-0408
- Priority: Routine
- CVSS: 5.5 (Medium)
- EPSS: 0.0032
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jan 15, 2024

## Description

A flaw was found in the X.Org server. The GLX PBuffer code does not callthe XACE hook when creating the buffer, leaving it unlabeled. When theclient issues another request to access that resource (as with aGetGeometry) or when it creates another resource that needs to access thatbuffer, such as a GC, the XSELINUX code will try to use an object that wasnever labeled and crash because the SID is NULL.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | xdmx Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xdmx 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xdmx-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xdmx Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xdmx 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xdmx-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xdmx-tools Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xdmx-tools 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xdmx-tools-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xdmx-tools Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xdmx-tools 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xdmx-tools-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xmir Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xmir 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xmir-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xnest Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xnest 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xnest-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xnest Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xnest 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xnest-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xnest Ubuntu 22.04.1 LTS (jammy) | 2:21.1.4-2ubuntu1.7~22.04.7 | [xnest 2:21.1.4-2ubuntu1.7~22.04.7](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xnest-2-21.1.4-2ubuntu1.7-22.04.7.md) | Jan 15, 2024 |
| Linux | xnest Ubuntu 24.10 (oracular) | 2:21.1.11-1ubuntu1 | [xnest 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-xnest-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xnest Ubuntu 25.04 (plucky) | 2:21.1.11-1ubuntu1 | [xnest 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-xnest-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xorg-server Debian 12.15 (bookworm) | 2:21.1.7-3+deb12u5 | [DEBIAN-CVE-2024-0408](https://patchblox.com/security/data/fix/linux/debian-cve-2024-0408.md) | Jan 18, 2024 |
| Linux | xorg-server Debian 13.5 (trixie) | 2:21.1.11-1 | [DEBIAN-CVE-2024-0408](https://patchblox.com/security/data/fix/linux/debian-cve-2024-0408.md) | Jan 18, 2024 |
| Linux | xorg-server Debian 14 | 2:21.1.11-1 | [DEBIAN-CVE-2024-0408](https://patchblox.com/security/data/fix/linux/debian-cve-2024-0408.md) | Jan 18, 2024 |
| Linux | xorg-server-source Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xorg-server-source 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xorg-server-source-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xorg-server-source Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xorg-server-source 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xorg-server-source-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xorg-server-source Ubuntu 22.04.1 LTS (jammy) | 2:21.1.4-2ubuntu1.7~22.04.7 | [xorg-server-source 2:21.1.4-2ubuntu1.7~22.04.7](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xorg-server-source-2-21.1.4-2ubuntu1.7-22.04.7.md) | Jan 15, 2024 |
| Linux | xorg-server-source Ubuntu 24.10 (oracular) | 2:21.1.11-1ubuntu1 | [xorg-server-source 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-xorg-server-source-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xorg-server-source Ubuntu 25.04 (plucky) | 2:21.1.11-1ubuntu1 | [xorg-server-source 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-xorg-server-source-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xorg-x11-server-Xdmx RHEL 8 | 0:1.20.11-22.el8 | [RHSA-2024:2995](https://patchblox.com/security/data/fix/linux/rhsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xdmx RHEL 9 | 0:1.20.11-24.el9 | [RHSA-2024:2169](https://patchblox.com/security/data/fix/linux/rhsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xdmx almalinux 8 | 1.20.11-22.el8 | [ALSA-2024:2995](https://patchblox.com/security/data/fix/linux/alsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xdmx almalinux 9 | 1.20.11-24.el9 | [ALSA-2024:2169](https://patchblox.com/security/data/fix/linux/alsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xdmx amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xdmx ol 8 | 0:1.20.11-22.el8 | [ELSA-2024-2995](https://patchblox.com/security/data/fix/linux/elsa-2024-2995.md) | May 23, 2024 |
| Linux | xorg-x11-server-Xdmx ol 9 | 0:1.20.11-24.el9 | [ELSA-2024-2169](https://patchblox.com/security/data/fix/linux/elsa-2024-2169.md) | May 2, 2024 |
| Linux | xorg-x11-server-Xdmx-debuginfo amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xephyr RHEL 8 | 0:1.20.11-22.el8 | [RHSA-2024:2995](https://patchblox.com/security/data/fix/linux/rhsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xephyr RHEL 9 | 0:1.20.11-24.el9 | [RHSA-2024:2169](https://patchblox.com/security/data/fix/linux/rhsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xephyr almalinux 8 | 1.20.11-22.el8 | [ALSA-2024:2995](https://patchblox.com/security/data/fix/linux/alsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xephyr almalinux 9 | 1.20.11-24.el9 | [ALSA-2024:2169](https://patchblox.com/security/data/fix/linux/alsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xephyr amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xephyr ol 8 | 0:1.20.11-22.el8 | [ELSA-2024-2995](https://patchblox.com/security/data/fix/linux/elsa-2024-2995.md) | May 23, 2024 |
| Linux | xorg-x11-server-Xephyr ol 9 | 0:1.20.11-24.el9 | [ELSA-2024-2169](https://patchblox.com/security/data/fix/linux/elsa-2024-2169.md) | May 2, 2024 |
| Linux | xorg-x11-server-Xephyr-debuginfo amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xnest RHEL 8 | 0:1.20.11-22.el8 | [RHSA-2024:2995](https://patchblox.com/security/data/fix/linux/rhsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xnest RHEL 9 | 0:1.20.11-24.el9 | [RHSA-2024:2169](https://patchblox.com/security/data/fix/linux/rhsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xnest almalinux 8 | 1.20.11-22.el8 | [ALSA-2024:2995](https://patchblox.com/security/data/fix/linux/alsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xnest almalinux 9 | 1.20.11-24.el9 | [ALSA-2024:2169](https://patchblox.com/security/data/fix/linux/alsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xnest amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xnest ol 8 | 0:1.20.11-22.el8 | [ELSA-2024-2995](https://patchblox.com/security/data/fix/linux/elsa-2024-2995.md) | May 23, 2024 |
| Linux | xorg-x11-server-Xnest ol 9 | 0:1.20.11-24.el9 | [ELSA-2024-2169](https://patchblox.com/security/data/fix/linux/elsa-2024-2169.md) | May 2, 2024 |
| Linux | xorg-x11-server-Xnest-debuginfo amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xorg RHEL 8 | 0:1.20.11-22.el8 | [RHSA-2024:2995](https://patchblox.com/security/data/fix/linux/rhsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xorg RHEL 9 | 0:1.20.11-24.el9 | [RHSA-2024:2169](https://patchblox.com/security/data/fix/linux/rhsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xorg almalinux 8 | 1.20.11-22.el8 | [ALSA-2024:2995](https://patchblox.com/security/data/fix/linux/alsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xorg almalinux 9 | 1.20.11-24.el9 | [ALSA-2024:2169](https://patchblox.com/security/data/fix/linux/alsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xorg amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xorg ol 8 | 0:1.20.11-22.el8 | [ELSA-2024-2995](https://patchblox.com/security/data/fix/linux/elsa-2024-2995.md) | May 23, 2024 |
| Linux | xorg-x11-server-Xorg ol 9 | 0:1.20.11-24.el9 | [ELSA-2024-2169](https://patchblox.com/security/data/fix/linux/elsa-2024-2169.md) | May 2, 2024 |
| Linux | xorg-x11-server-Xorg-debuginfo amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xvfb RHEL 8 | 0:1.20.11-22.el8 | [RHSA-2024:2995](https://patchblox.com/security/data/fix/linux/rhsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xvfb RHEL 9 | 0:1.20.11-24.el9 | [RHSA-2024:2169](https://patchblox.com/security/data/fix/linux/rhsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xvfb almalinux 8 | 1.20.11-22.el8 | [ALSA-2024:2995](https://patchblox.com/security/data/fix/linux/alsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xvfb almalinux 9 | 1.20.11-24.el9 | [ALSA-2024:2169](https://patchblox.com/security/data/fix/linux/alsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xvfb amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xvfb ol 8 | 0:1.20.11-22.el8 | [ELSA-2024-2995](https://patchblox.com/security/data/fix/linux/elsa-2024-2995.md) | May 23, 2024 |
| Linux | xorg-x11-server-Xvfb ol 9 | 0:1.20.11-24.el9 | [ELSA-2024-2169](https://patchblox.com/security/data/fix/linux/elsa-2024-2169.md) | May 2, 2024 |
| Linux | xorg-x11-server-Xvfb-debuginfo amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-Xwayland RHEL 8 | 0:21.1.3-15.el8 | [RHSA-2024:2996](https://patchblox.com/security/data/fix/linux/rhsa-2024-2996.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xwayland RHEL 9 | 0:22.1.9-5.el9 | [RHSA-2024:2170](https://patchblox.com/security/data/fix/linux/rhsa-2024-2170.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xwayland almalinux 8 | 21.1.3-15.el8 | [ALSA-2024:2996](https://patchblox.com/security/data/fix/linux/alsa-2024-2996.md) | May 22, 2024 |
| Linux | xorg-x11-server-Xwayland almalinux 9 | 22.1.9-5.el9 | [ALSA-2024:2170](https://patchblox.com/security/data/fix/linux/alsa-2024-2170.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-Xwayland ol 8 | 0:21.1.3-15.el8 | [ELSA-2024-2996](https://patchblox.com/security/data/fix/linux/elsa-2024-2996.md) | May 23, 2024 |
| Linux | xorg-x11-server-Xwayland ol 9 | 0:22.1.9-5.el9 | [ELSA-2024-2170](https://patchblox.com/security/data/fix/linux/elsa-2024-2170.md) | May 2, 2024 |
| Linux | xorg-x11-server-common RHEL 8 | 0:1.20.11-22.el8 | [RHSA-2024:2995](https://patchblox.com/security/data/fix/linux/rhsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-common RHEL 9 | 0:1.20.11-24.el9 | [RHSA-2024:2169](https://patchblox.com/security/data/fix/linux/rhsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-common almalinux 8 | 1.20.11-22.el8 | [ALSA-2024:2995](https://patchblox.com/security/data/fix/linux/alsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-common almalinux 9 | 1.20.11-24.el9 | [ALSA-2024:2169](https://patchblox.com/security/data/fix/linux/alsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-common amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-common ol 8 | 0:1.20.11-22.el8 | [ELSA-2024-2995](https://patchblox.com/security/data/fix/linux/elsa-2024-2995.md) | May 23, 2024 |
| Linux | xorg-x11-server-common ol 9 | 0:1.20.11-24.el9 | [ELSA-2024-2169](https://patchblox.com/security/data/fix/linux/elsa-2024-2169.md) | May 2, 2024 |
| Linux | xorg-x11-server-debuginfo amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-debugsource amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-devel RHEL 8 | 0:1.20.11-22.el8 | [RHSA-2024:2995](https://patchblox.com/security/data/fix/linux/rhsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-devel RHEL 9 | 0:1.20.11-24.el9 | [RHSA-2024:2169](https://patchblox.com/security/data/fix/linux/rhsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-devel almalinux 8 | 1.20.11-22.el8 | [ALSA-2024:2995](https://patchblox.com/security/data/fix/linux/alsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-devel almalinux 9 | 1.20.11-24.el9 | [ALSA-2024:2169](https://patchblox.com/security/data/fix/linux/alsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-devel amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-devel ol 8 | 0:1.20.11-22.el8 | [ELSA-2024-2995](https://patchblox.com/security/data/fix/linux/elsa-2024-2995.md) | May 23, 2024 |
| Linux | xorg-x11-server-devel ol 9 | 0:1.20.11-24.el9 | [ELSA-2024-2169](https://patchblox.com/security/data/fix/linux/elsa-2024-2169.md) | May 2, 2024 |
| Linux | xorg-x11-server-source RHEL 8 | 0:1.20.11-22.el8 | [RHSA-2024:2995](https://patchblox.com/security/data/fix/linux/rhsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-source RHEL 9 | 0:1.20.11-24.el9 | [RHSA-2024:2169](https://patchblox.com/security/data/fix/linux/rhsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-source almalinux 8 | 1.20.11-22.el8 | [ALSA-2024:2995](https://patchblox.com/security/data/fix/linux/alsa-2024-2995.md) | May 22, 2024 |
| Linux | xorg-x11-server-source almalinux 9 | 1.20.11-24.el9 | [ALSA-2024:2169](https://patchblox.com/security/data/fix/linux/alsa-2024-2169.md) | Apr 30, 2024 |
| Linux | xorg-x11-server-source amzn 2023 | 1.20.14-30.amzn2023.0.1 | [ALAS2023-2024-522](https://patchblox.com/security/data/fix/linux/alas2023-2024-522.md) | Feb 15, 2024 |
| Linux | xorg-x11-server-source ol 8 | 0:1.20.11-22.el8 | [ELSA-2024-2995](https://patchblox.com/security/data/fix/linux/elsa-2024-2995.md) | May 23, 2024 |
| Linux | xorg-x11-server-source ol 9 | 0:1.20.11-24.el9 | [ELSA-2024-2169](https://patchblox.com/security/data/fix/linux/elsa-2024-2169.md) | May 2, 2024 |
| Linux | xserver-common Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xserver-common 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xserver-common-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xserver-common Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xserver-common 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xserver-common-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xserver-common Ubuntu 22.04.1 LTS (jammy) | 2:21.1.4-2ubuntu1.7~22.04.7 | [xserver-common 2:21.1.4-2ubuntu1.7~22.04.7](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xserver-common-2-21.1.4-2ubuntu1.7-22.04.7.md) | Jan 15, 2024 |
| Linux | xserver-common Ubuntu 24.10 (oracular) | 2:21.1.11-1ubuntu1 | [xserver-common 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-xserver-common-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xserver-common Ubuntu 25.04 (plucky) | 2:21.1.11-1ubuntu1 | [xserver-common 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-xserver-common-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xserver-xephyr Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xserver-xephyr 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xserver-xephyr-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xserver-xephyr Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xserver-xephyr 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xserver-xephyr-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xserver-xephyr Ubuntu 22.04.1 LTS (jammy) | 2:21.1.4-2ubuntu1.7~22.04.7 | [xserver-xephyr 2:21.1.4-2ubuntu1.7~22.04.7](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xserver-xephyr-2-21.1.4-2ubuntu1.7-22.04.7.md) | Jan 15, 2024 |
| Linux | xserver-xephyr Ubuntu 24.10 (oracular) | 2:21.1.11-1ubuntu1 | [xserver-xephyr 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-xserver-xephyr-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xserver-xephyr Ubuntu 25.04 (plucky) | 2:21.1.11-1ubuntu1 | [xserver-xephyr 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-xserver-xephyr-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xserver-xorg-core Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xserver-xorg-core 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xserver-xorg-core-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xserver-xorg-core Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xserver-xorg-core 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xserver-xorg-core-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xserver-xorg-core Ubuntu 22.04.1 LTS (jammy) | 2:21.1.4-2ubuntu1.7~22.04.7 | [xserver-xorg-core 2:21.1.4-2ubuntu1.7~22.04.7](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xserver-xorg-core-2-21.1.4-2ubuntu1.7-22.04.7.md) | Jan 15, 2024 |
| Linux | xserver-xorg-core Ubuntu 24.10 (oracular) | 2:21.1.11-1ubuntu1 | [xserver-xorg-core 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-xserver-xorg-core-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xserver-xorg-core Ubuntu 25.04 (plucky) | 2:21.1.11-1ubuntu1 | [xserver-xorg-core 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-xserver-xorg-core-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xserver-xorg-legacy Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xserver-xorg-legacy 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xserver-xorg-legacy-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xserver-xorg-legacy Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xserver-xorg-legacy 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xserver-xorg-legacy-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xserver-xorg-legacy Ubuntu 22.04.1 LTS (jammy) | 2:21.1.4-2ubuntu1.7~22.04.7 | [xserver-xorg-legacy 2:21.1.4-2ubuntu1.7~22.04.7](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xserver-xorg-legacy-2-21.1.4-2ubuntu1.7-22.04.7.md) | Jan 15, 2024 |
| Linux | xserver-xorg-legacy Ubuntu 24.10 (oracular) | 2:21.1.11-1ubuntu1 | [xserver-xorg-legacy 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-xserver-xorg-legacy-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xserver-xorg-legacy Ubuntu 25.04 (plucky) | 2:21.1.11-1ubuntu1 | [xserver-xorg-legacy 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-xserver-xorg-legacy-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xserver-xorg-xmir Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xserver-xorg-xmir 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xserver-xorg-xmir-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xvfb Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xvfb 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xvfb-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xvfb Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xvfb 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xvfb-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xvfb Ubuntu 22.04.1 LTS (jammy) | 2:21.1.4-2ubuntu1.7~22.04.7 | [xvfb 2:21.1.4-2ubuntu1.7~22.04.7](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xvfb-2-21.1.4-2ubuntu1.7-22.04.7.md) | Jan 15, 2024 |
| Linux | xvfb Ubuntu 24.10 (oracular) | 2:21.1.11-1ubuntu1 | [xvfb 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-xvfb-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xvfb Ubuntu 25.04 (plucky) | 2:21.1.11-1ubuntu1 | [xvfb 2:21.1.11-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-xvfb-2-21.1.11-1ubuntu1.md) | Jan 16, 2026 |
| Linux | xwayland Debian 13.5 (trixie) | 2:23.2.4-1 | [DEBIAN-CVE-2024-0408](https://patchblox.com/security/data/fix/linux/debian-cve-2024-0408.md) | Jan 18, 2024 |
| Linux | xwayland Debian 14 | 2:23.2.4-1 | [DEBIAN-CVE-2024-0408](https://patchblox.com/security/data/fix/linux/debian-cve-2024-0408.md) | Jan 18, 2024 |
| Linux | xwayland Ubuntu 18.04.6 LTS (bionic) | 2:1.19.6-1ubuntu4.15+esm4 | [xwayland 2:1.19.6-1ubuntu4.15+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xwayland-2-1.19.6-1ubuntu4.15-esm4.md) | Jan 15, 2024 |
| Linux | xwayland Ubuntu 20.04 LTS (focal) | 2:1.20.13-1ubuntu1~20.04.14 | [xwayland 2:1.20.13-1ubuntu1~20.04.14](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xwayland-2-1.20.13-1ubuntu1-20.04.14.md) | Jan 15, 2024 |
| Linux | xwayland Ubuntu 22.04.1 LTS (jammy) | 2:22.1.1-1ubuntu0.10 | [xwayland 2:22.1.1-1ubuntu0.10](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xwayland-2-22.1.1-1ubuntu0.10.md) | Jan 15, 2024 |
| Linux | xwayland Ubuntu 24.04.5 LTS (noble) | 2:23.2.4-1 | [xwayland 2:23.2.4-1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-xwayland-2-23.2.4-1.md) | Jan 15, 2024 |
| Linux | xwayland Ubuntu 24.10 (oracular) | 2:23.2.4-1 | [xwayland 2:23.2.4-1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-xwayland-2-23.2.4-1.md) | Jan 16, 2026 |
| Linux | xwayland Ubuntu 25.04 (plucky) | 2:23.2.4-1 | [xwayland 2:23.2.4-1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-xwayland-2-23.2.4-1.md) | Jan 16, 2026 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.