ГлавнаяУязвимости → CVE-2025-62230
7.3высокая

CVE-2025-62230

→ есть в БДУ: BDU:2025-15932 (на русском)
Описание (на английском; русское — в БДУ выше)

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.

Затрагиваемое ПО
X.org X serverX.org XwaylandIbm ViosIbm AixDebian Debian linuxRedhat Enterprise linuxRedhat Enterprise linux ausRedhat Enterprise linux elsRedhat Enterprise linux eusRedhat Enterprise linux tusRedhat Enterprise linux update services for sap solutions
CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Источники
https://access.redhat.com/errata/RHSA-2025:19432https://access.redhat.com/errata/RHSA-2025:19433https://access.redhat.com/errata/RHSA-2025:19434https://access.redhat.com/errata/RHSA-2025:19435https://access.redhat.com/errata/RHSA-2025:19489https://access.redhat.com/errata/RHSA-2025:19623https://access.redhat.com/errata/RHSA-2025:19909https://access.redhat.com/errata/RHSA-2025:20958