# CVE-2026-93520: X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write

CVE-2026-93520 is fixed in 13 products on 1 platform, first by DEBIAN-CVE-2026-93520, released October 12, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-93520
- Priority: High
- CVSS: 7.8 (Important)
- EPSS: 0.0020
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 7, 2026
- Weakness: Heap-based Buffer Overflow
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93520

## Description

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.    Security Fix(es):      * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)   * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)   * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)   * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)   * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)   For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | xorg-server Debian 14 | 2:21.1.25-1 | [DEBIAN-CVE-2026-93520](https://patchblox.com/security/data/fix/linux/debian-cve-2026-93520.md) | Oct 12, 2026 |
| Linux | xorg-x11-server rocky 8 | 0:1.20.11-28.el8_10.5 | [RLSA-2026:89747](https://patchblox.com/security/data/fix/linux/rlsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server rocky 9 | 0:1.20.11-34.el9_8.5 | [RLSA-2026:84574](https://patchblox.com/security/data/fix/linux/rlsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server sles 15.6 | 21.1.11-150600.5.34.1 | [SUSE-SU-2026:4647-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4647-1.md) | Nov 7, 2026 |
| Linux | xorg-x11-server sles 15.7 | 21.1.15-150700.5.25.1 | [SUSE-SU-2026:4646-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4646-1.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xdmx RHEL 8 | 0:1.20.11-28.el8_10.5 | [RHSA-2026:89747](https://patchblox.com/security/data/fix/linux/rhsa-2026-89747.md) | Oct 27, 2026 |
| Linux | xorg-x11-server-Xdmx RHEL 9 | 0:1.20.11-34.el9_8.5 | [RHSA-2026:84574](https://patchblox.com/security/data/fix/linux/rhsa-2026-84574.md) | Oct 19, 2026 |
| Linux | xorg-x11-server-Xdmx almalinux 8 | 1.20.11-28.el8_10.5 | [ALSA-2026:89747](https://patchblox.com/security/data/fix/linux/alsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xdmx almalinux 9 | 1.20.11-34.el9_8.5 | [ALSA-2026:84574](https://patchblox.com/security/data/fix/linux/alsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xdmx ol 8 | 0:1.20.11-28.el8_10.5 | [ELSA-2026-89747](https://patchblox.com/security/data/fix/linux/elsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xdmx ol 9 | 0:1.20.11-34.el9_8.5 | [ELSA-2026-84574](https://patchblox.com/security/data/fix/linux/elsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xephyr RHEL 8 | 0:1.20.11-28.el8_10.5 | [RHSA-2026:89747](https://patchblox.com/security/data/fix/linux/rhsa-2026-89747.md) | Oct 27, 2026 |
| Linux | xorg-x11-server-Xephyr RHEL 9 | 0:1.20.11-34.el9_8.5 | [RHSA-2026:84574](https://patchblox.com/security/data/fix/linux/rhsa-2026-84574.md) | Oct 19, 2026 |
| Linux | xorg-x11-server-Xephyr almalinux 8 | 1.20.11-28.el8_10.5 | [ALSA-2026:89747](https://patchblox.com/security/data/fix/linux/alsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xephyr almalinux 9 | 1.20.11-34.el9_8.5 | [ALSA-2026:84574](https://patchblox.com/security/data/fix/linux/alsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xephyr ol 8 | 0:1.20.11-28.el8_10.5 | [ELSA-2026-89747](https://patchblox.com/security/data/fix/linux/elsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xephyr ol 9 | 0:1.20.11-34.el9_8.5 | [ELSA-2026-84574](https://patchblox.com/security/data/fix/linux/elsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xnest RHEL 8 | 0:1.20.11-28.el8_10.5 | [RHSA-2026:89747](https://patchblox.com/security/data/fix/linux/rhsa-2026-89747.md) | Oct 27, 2026 |
| Linux | xorg-x11-server-Xnest RHEL 9 | 0:1.20.11-34.el9_8.5 | [RHSA-2026:84574](https://patchblox.com/security/data/fix/linux/rhsa-2026-84574.md) | Oct 19, 2026 |
| Linux | xorg-x11-server-Xnest almalinux 8 | 1.20.11-28.el8_10.5 | [ALSA-2026:89747](https://patchblox.com/security/data/fix/linux/alsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xnest almalinux 9 | 1.20.11-34.el9_8.5 | [ALSA-2026:84574](https://patchblox.com/security/data/fix/linux/alsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xnest ol 8 | 0:1.20.11-28.el8_10.5 | [ELSA-2026-89747](https://patchblox.com/security/data/fix/linux/elsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xnest ol 9 | 0:1.20.11-34.el9_8.5 | [ELSA-2026-84574](https://patchblox.com/security/data/fix/linux/elsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xorg RHEL 8 | 0:1.20.11-28.el8_10.5 | [RHSA-2026:89747](https://patchblox.com/security/data/fix/linux/rhsa-2026-89747.md) | Oct 27, 2026 |
| Linux | xorg-x11-server-Xorg RHEL 9 | 0:1.20.11-34.el9_8.5 | [RHSA-2026:84574](https://patchblox.com/security/data/fix/linux/rhsa-2026-84574.md) | Oct 19, 2026 |
| Linux | xorg-x11-server-Xorg almalinux 8 | 1.20.11-28.el8_10.5 | [ALSA-2026:89747](https://patchblox.com/security/data/fix/linux/alsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xorg almalinux 9 | 1.20.11-34.el9_8.5 | [ALSA-2026:84574](https://patchblox.com/security/data/fix/linux/alsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xorg ol 8 | 0:1.20.11-28.el8_10.5 | [ELSA-2026-89747](https://patchblox.com/security/data/fix/linux/elsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xorg ol 9 | 0:1.20.11-34.el9_8.5 | [ELSA-2026-84574](https://patchblox.com/security/data/fix/linux/elsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xvfb RHEL 8 | 0:1.20.11-28.el8_10.5 | [RHSA-2026:89747](https://patchblox.com/security/data/fix/linux/rhsa-2026-89747.md) | Oct 27, 2026 |
| Linux | xorg-x11-server-Xvfb RHEL 9 | 0:1.20.11-34.el9_8.5 | [RHSA-2026:84574](https://patchblox.com/security/data/fix/linux/rhsa-2026-84574.md) | Oct 19, 2026 |
| Linux | xorg-x11-server-Xvfb almalinux 8 | 1.20.11-28.el8_10.5 | [ALSA-2026:89747](https://patchblox.com/security/data/fix/linux/alsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xvfb almalinux 9 | 1.20.11-34.el9_8.5 | [ALSA-2026:84574](https://patchblox.com/security/data/fix/linux/alsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xvfb ol 8 | 0:1.20.11-28.el8_10.5 | [ELSA-2026-89747](https://patchblox.com/security/data/fix/linux/elsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xvfb ol 9 | 0:1.20.11-34.el9_8.5 | [ELSA-2026-84574](https://patchblox.com/security/data/fix/linux/elsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland RHEL 10 | 24.1.9-4.el10_2.4 | [RHSA-2026:85191](https://patchblox.com/security/data/fix/linux/rhsa-2026-85191.md) | Oct 20, 2026 |
| Linux | xorg-x11-server-Xwayland RHEL 8 | 0:21.1.3-20.el8_10.4 | [RHSA-2026:86907](https://patchblox.com/security/data/fix/linux/rhsa-2026-86907.md) | Oct 21, 2026 |
| Linux | xorg-x11-server-Xwayland RHEL 9 | 0:24.1.9-4.el9_8.4 | [RHSA-2026:85193](https://patchblox.com/security/data/fix/linux/rhsa-2026-85193.md) | Oct 20, 2026 |
| Linux | xorg-x11-server-Xwayland almalinux 10 | 24.1.9-4.el10_2.4 | [ALSA-2026:85191](https://patchblox.com/security/data/fix/linux/alsa-2026-85191.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland almalinux 8 | 21.1.3-20.el8_10.5 | [ALSA-2026:95281](https://patchblox.com/security/data/fix/linux/alsa-2026-95281.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland almalinux 9 | 24.1.9-4.el9_8.4 | [ALSA-2026:85193](https://patchblox.com/security/data/fix/linux/alsa-2026-85193.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland ol 10 | 0:24.1.9-4.el10_2.4 | [ELSA-2026-85191](https://patchblox.com/security/data/fix/linux/elsa-2026-85191.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland ol 8 | 0:21.1.3-20.el8_10.4 | [ELSA-2026-86907](https://patchblox.com/security/data/fix/linux/elsa-2026-86907.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland ol 9 | 0:24.1.9-4.el9_8.4 | [ELSA-2026-85193](https://patchblox.com/security/data/fix/linux/elsa-2026-85193.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland rocky 10 | 0:24.1.9-4.el10_2.4 | [RLSA-2026:85191](https://patchblox.com/security/data/fix/linux/rlsa-2026-85191.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland rocky 8 | 0:21.1.3-20.el8_10.5 | [RLSA-2026:95281](https://patchblox.com/security/data/fix/linux/rlsa-2026-95281.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland rocky 9 | 0:24.1.9-4.el9_8.4 | [RLSA-2026:85193](https://patchblox.com/security/data/fix/linux/rlsa-2026-85193.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland-devel RHEL 9 | 0:24.1.9-4.el9_8.4 | [RHSA-2026:85193](https://patchblox.com/security/data/fix/linux/rhsa-2026-85193.md) | Oct 20, 2026 |
| Linux | xorg-x11-server-Xwayland-devel almalinux 10 | 24.1.9-4.el10_2.4 | [ALSA-2026:85191](https://patchblox.com/security/data/fix/linux/alsa-2026-85191.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland-devel almalinux 9 | 24.1.9-4.el9_8.4 | [ALSA-2026:85193](https://patchblox.com/security/data/fix/linux/alsa-2026-85193.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland-devel ol 10 | 0:24.1.9-4.el10_2.4 | [ELSA-2026-85191](https://patchblox.com/security/data/fix/linux/elsa-2026-85191.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-Xwayland-devel ol 9 | 0:24.1.9-4.el9_8.4 | [ELSA-2026-85193](https://patchblox.com/security/data/fix/linux/elsa-2026-85193.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-common RHEL 8 | 0:1.20.11-28.el8_10.5 | [RHSA-2026:89747](https://patchblox.com/security/data/fix/linux/rhsa-2026-89747.md) | Oct 27, 2026 |
| Linux | xorg-x11-server-common RHEL 9 | 0:1.20.11-34.el9_8.5 | [RHSA-2026:84574](https://patchblox.com/security/data/fix/linux/rhsa-2026-84574.md) | Oct 19, 2026 |
| Linux | xorg-x11-server-common almalinux 8 | 1.20.11-28.el8_10.5 | [ALSA-2026:89747](https://patchblox.com/security/data/fix/linux/alsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-common almalinux 9 | 1.20.11-34.el9_8.5 | [ALSA-2026:84574](https://patchblox.com/security/data/fix/linux/alsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-common ol 8 | 0:1.20.11-28.el8_10.5 | [ELSA-2026-89747](https://patchblox.com/security/data/fix/linux/elsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-common ol 9 | 0:1.20.11-34.el9_8.5 | [ELSA-2026-84574](https://patchblox.com/security/data/fix/linux/elsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-devel RHEL 8 | 0:1.20.11-28.el8_10.5 | [RHSA-2026:89747](https://patchblox.com/security/data/fix/linux/rhsa-2026-89747.md) | Oct 27, 2026 |
| Linux | xorg-x11-server-devel RHEL 9 | 0:1.20.11-34.el9_8.5 | [RHSA-2026:84574](https://patchblox.com/security/data/fix/linux/rhsa-2026-84574.md) | Oct 19, 2026 |
| Linux | xorg-x11-server-devel almalinux 8 | 1.20.11-28.el8_10.5 | [ALSA-2026:89747](https://patchblox.com/security/data/fix/linux/alsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-devel almalinux 9 | 1.20.11-34.el9_8.5 | [ALSA-2026:84574](https://patchblox.com/security/data/fix/linux/alsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-devel ol 8 | 0:1.20.11-28.el8_10.5 | [ELSA-2026-89747](https://patchblox.com/security/data/fix/linux/elsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-devel ol 9 | 0:1.20.11-34.el9_8.5 | [ELSA-2026-84574](https://patchblox.com/security/data/fix/linux/elsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-source RHEL 8 | 0:1.20.11-28.el8_10.5 | [RHSA-2026:89747](https://patchblox.com/security/data/fix/linux/rhsa-2026-89747.md) | Oct 27, 2026 |
| Linux | xorg-x11-server-source RHEL 9 | 0:1.20.11-34.el9_8.5 | [RHSA-2026:84574](https://patchblox.com/security/data/fix/linux/rhsa-2026-84574.md) | Oct 19, 2026 |
| Linux | xorg-x11-server-source almalinux 8 | 1.20.11-28.el8_10.5 | [ALSA-2026:89747](https://patchblox.com/security/data/fix/linux/alsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-source almalinux 9 | 1.20.11-34.el9_8.5 | [ALSA-2026:84574](https://patchblox.com/security/data/fix/linux/alsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-source ol 8 | 0:1.20.11-28.el8_10.5 | [ELSA-2026-89747](https://patchblox.com/security/data/fix/linux/elsa-2026-89747.md) | Nov 7, 2026 |
| Linux | xorg-x11-server-source ol 9 | 0:1.20.11-34.el9_8.5 | [ELSA-2026-84574](https://patchblox.com/security/data/fix/linux/elsa-2026-84574.md) | Nov 7, 2026 |
| Linux | xwayland Debian 14 | 2:24.1.14-1 | [DEBIAN-CVE-2026-93520](https://patchblox.com/security/data/fix/linux/debian-cve-2026-93520.md) | Oct 12, 2026 |
| Linux | xwayland opensuse-leap 16.0 | 24.1.6-160000.7.1 | [OPENSUSE-SU-2026:22085-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-22085-1.md) | Nov 7, 2026 |
| Linux | xwayland sles 15.7 | 24.1.5-150700.3.25.1 | [SUSE-SU-2026:4835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4835-1.md) | Nov 7, 2026 |
| Linux | xwayland sles 16.0 | 24.1.6-160000.7.1 | [SUSE-SU-2026:24230-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-24230-1.md) | Nov 7, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.