Linux · Security advisory · May 13, 2025

ALSA-2025:7163: Security update for 8 packages

ALSA-2025:7163, released May 13, 2025, fixes 9 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0090
59th percentile

Priority of the 9 CVEs

Patch now 0 Urgent 0 High 9 Routine 0

Fixed package versions

ProductReleaseFixed in
xorg-x11-server-Xdmxalmalinux 91.20.11-28.el9_6
xorg-x11-server-Xephyralmalinux 91.20.11-28.el9_6
xorg-x11-server-Xnestalmalinux 91.20.11-28.el9_6
xorg-x11-server-Xorgalmalinux 91.20.11-28.el9_6
xorg-x11-server-Xvfbalmalinux 91.20.11-28.el9_6
xorg-x11-server-commonalmalinux 91.20.11-28.el9_6
xorg-x11-server-develalmalinux 91.20.11-28.el9_6
xorg-x11-server-sourcealmalinux 91.20.11-28.el9_6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-9632 xnest: A flaw was found in the X.org server 7.8 0.0090 None reported
High CVE-2025-26597 xnest: A buffer overflow flaw was found in X.Org and Xwayland 7.8 0.0044 None reported
High CVE-2025-26595 xnest: A buffer overflow flaw was found in X.Org and Xwayland 7.8 0.0044 None reported
High CVE-2025-26596 xnest: A heap overflow flaw was found in X.Org and Xwayland 7.8 0.0044 None reported
High CVE-2025-26598 xnest: An out-of-bounds write flaw was found in X.Org and Xwayland 7.8 0.0041 None reported
High CVE-2025-26599 xnest: An access to an uninitialized pointer flaw was found in X.Org and Xwayland.The function compCheckRedirect() may fail... 7.8 0.0041 None reported
High CVE-2025-26594 xserver-xephyr: A use-after-free flaw was found in X.Org and Xwayland 7.8 0.0039 None reported
High CVE-2025-26600 xorg-server-source: A use-after-free flaw was found in X.Org and Xwayland 7.8 0.0039 None reported
High CVE-2025-26601 xnest: A use-after-free flaw was found in X.Org and Xwayland 7.8 0.0039 None reported
Showing 1 to 9 of 9 1