Xorg-x11-server: selinux unlabeled glx pbuffer
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 21.1.11
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- xorg-server
From 21.1.0 · fixed in 21.1.11
- xorg-x11-server
Version range not reported
- xorg-x11-server
Version range not reported
- xorg-x11-server-Xwayland
Version range not reported
- xorg-x11-server
Version range not reported
- xorg-x11-server-Xwayland
Version range not reported
- tigervnc
Version range not reported
- xorg-x11-server
Version range not reported
- tigervnc
Version range not reported
- tigervnc
Version range not reported
- tigervnc
Version range not reported